CVE-2020-5770 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Teltonika TRB2_R_00.02.04.01 firmware and the TRB245 device. This high-severity vulnerability (CVSS 8.8) allows a remote attacker to trick legitimate users into executing sensitive application actions by clicking a crafted link, potentially leading to full compromise of confidentiality, integrity, and availability. While the EPSS score is low, indicating a low probability of exploitation, there is no known public exploit code (Metasploit, Nuclei, ExploitDB) and no evidence of active exploitation. Furthermore, there is no community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
00.02.04.01CPE matchmatch criteria | cpe:2.3:o:teltonika-networks:trb245_firmware:00.02.04.01:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020Teltonika Gateway TRB245 Multiple Vulnerabilities
Aug 3, 2020