CVE-2018-19878: Teltonika RUT950 Firmware

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.

Affected products

• Teltonika RUT950 Firmware: version r_31.04.89 only

Published 2019-06-19. Last modified 2026-06-17.