Approved changes feed: RSS · Atom

cpe:2.3:h:teltonika-networks:trb245:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTeltonika Networks (6c326e00-df74-5f5f-a8a8-937dad526e20)
ProductTrb245 (06ee90f6-3476-5a44-ba74-474331958b30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5789 not_vulnerable 2026-06-03 14:42:57.300920 Details available
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.
Published: 2020-10-01T19:39:43.000Z
Updated: 2024-08-04T08:39:25.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5788 not_vulnerable 2026-06-03 14:42:57.300623 Details available
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action.
Published: 2020-10-01T19:47:10.000Z
Updated: 2024-08-04T08:39:25.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5787 not_vulnerable 2026-06-03 14:42:57.300326 Details available
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action.
Published: 2020-10-01T19:45:15.000Z
Updated: 2024-08-04T08:39:25.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5786 not_vulnerable 2026-06-03 14:42:57.300006 Details available
Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
Published: 2020-10-01T19:41:22.000Z
Updated: 2024-08-04T08:39:25.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5785 not_vulnerable 2026-06-03 14:42:57.299671 Details available
Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter.
Published: 2020-10-01T19:43:32.000Z
Updated: 2024-08-04T08:39:25.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5784 not_vulnerable 2026-06-03 14:42:57.299269 Details available
Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs.
Published: 2020-10-01T19:36:33.000Z
Updated: 2024-08-04T08:39:25.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5773 not_vulnerable 2026-06-03 14:42:57.283528 Details available
Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations.
Published: 2020-08-03T19:55:40.000Z
Updated: 2024-08-04T08:39:25.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5772 not_vulnerable 2026-06-03 14:42:57.283222 Details available
Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious package file.
Published: 2020-08-03T19:53:01.000Z
Updated: 2024-08-04T08:39:25.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5771 not_vulnerable 2026-06-03 14:42:57.282889 Details available
Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious backup archive.
Published: 2020-08-03T19:58:42.000Z
Updated: 2024-08-04T08:39:25.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5770 not_vulnerable 2026-06-03 14:42:57.282467 Details available
Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
Published: 2020-08-03T19:57:28.000Z
Updated: 2024-08-04T08:39:25.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.