CVE-2018-19878

6.5 mediumEPSS 1.2%

Medium (6.5) in teltonika rut950 firmware. EPSS 1.2% chance of exploitation in the next 30 days.

An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-11-01)
CWE: CWE-416
Published: 2019-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teltonika:rut950_firmware

References

https://www.triadsec.com/
https://www.triadsec.com/CVE-2018-19878.pdf
https://www.triadsec.com/
https://www.triadsec.com/CVE-2018-19878.pdf

Check your stack JSON