Noam Moshe

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package na

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated at

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN. It connects new devices in a manner that allows the new device to communicate with all Telt

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a devi

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058

Schneider Electric Modicon M241, M251, and M262

Trane Tracer SC, Tracer SC+, and Tracer Concierge

Copeland XWEB and XWEB Pro

Johnson Controls, Inc. Frick Controls Quantum HD

ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)