CVE-2017-8116
CriticalSummary
The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.
Risk Assessment
Attackers can gain full access to the system, potentially leading to control over the device and the entire network.
Recommendation
It is recommended to update the router firmware to the latest version to mitigate this vulnerability and restrict access to the management interface.
Original NVD description (English source)
The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.