CVE-2020-5785

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3

Description The issue is related to insufficient output sanitization, which allows an unauthenticated attacker to conduct reflected cross-site scripting. This can be achieved via a crafted action or pkg name parameter.

Recommendations For Teltonika firmware version TRB2 R 00.02.04.3, consider restricting access to the vulnerable parameters action and pkg name to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.