{"id":"CVE-2018-19879","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-19879","generatedAt":"2026-10-28T20:25:58.533Z","title":"An anonymous attacker has the ability to make unlimited login attempts with an automated tool.","description":"An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password.","published":"2019-03-28T17:29:00.000Z","lastModified":"2026-06-17T01:50:03.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-307"],"affected":["teltonika/rut950 firmware"],"epss":{"score":0.01257,"percentile":0.694,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://wiki.teltonika.lt/index.php?title=RUT9xx_Firmware","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.triadsec.com/CVE-2018-19879.pdf","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://wiki.teltonika.lt/index.php?title=RUT9xx_Firmware","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.triadsec.com/CVE-2018-19879.pdf","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-19879","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}