You do not have permission to edit this page, for the following reasons:
'''Documentation-based security assessment — pending evidence completion and administrator review. No overall grade is assigned.''' == Device == * Product: Teltonika RUT955 * Brand: Teltonika * Model: RUT955 * Type: Router * Operating system: RutOS * Website: [https://wiki.teltonika-networks.com/view/RUT955 Official model documentation] * Exact commercial release date: unverified == Device security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Known hardware tampering || Unscored — insufficient evidence || [https://wiki.teltonika-networks.com/view/RUT955_Device_Recovery_Options Source] || Unscored: physical reset is documented, but this does not establish the frequency of malicious hardware tampering. |- | Known vulnerabilities || Very common || [https://wiki.teltonika-networks.com/view/RUT955_Firmware_Downloads Source] || Multiple historical CVE patches are listed. This rating concerns documented vulnerability history; it does not mean patched firmware remains vulnerable. |- | Prior attacks || Unscored — insufficient evidence || [https://claroty.com/team82/research/triple-threat-breaking-teltonika-routers-three-ways Source] || Unscored: Team82 demonstrated RUT955 exploitation in research. A laboratory attack does not establish real-world attack frequency. |- | Updatability || Rare || [https://wiki.teltonika-networks.com/view/RUT955_Firmware_Downloads Source] || RUT9_R_00.07.06.21 (2026-04-15) is listed. Recent updates are sparse and the model is in EOL transition; support has not yet ended. Availability does not prove installation. |} == System security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Authentication with other systems || Partial || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || Certificate-based services are configurable; universal mutual authentication across interfaces is not established. |- | Communications || No encryption || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || Scope: documented management defaults. HTTP and HTTPS are enabled, but HTTPS redirection defaults off. Plain HTTP remains possible; this is not a claim that all traffic lacks encryption. |- | Storage encryption || Unscored — insufficient evidence || [https://wiki.teltonika-networks.com/view/RUT955_Maintenance Source] || Unscored: whole-flash encryption has not been established. Encrypted backup export does not demonstrate encryption of resident flash. |} == User authentication == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Account management || Full || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || Separate WebUI users and editable read/write permission groups are documented. SSH users have separate constraints. |- | Authentication || Basic || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || Password authentication is the baseline. Stronger optional methods require configuration; deployed settings were not tested. |- | Brute-force protection || Exist || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || IP blocking for failed SSH/WebUI logins defaults on, with a configurable threshold of 10 attempts. |- | Event logging || Partial logging || [https://wiki.teltonika-networks.com/view/RUT955_Administration Source] || Login-attempt source, protocol and status are documented. Persistent retention and complete access auditing remain unverified. |- | Passwords || Require change after setup with complexity requirements || [https://wiki.teltonika-networks.com/view/RUT955_Setup_Wizard Source] || First WebUI login requires changing the default password. Minimum eight characters with uppercase, lowercase and a digit are documented. |} == Scope and evidence gaps == Documentation review dated 2026-10-24; no hands-on testing. Criteria describe the cited model manuals and firmware histories, not every installed configuration. Unknown values are intentionally unscored and require administrator review. The exact commercial release date has not been verified and is left blank. The [https://www.teltonika-networks.com/support/eol-products vendor EOL table] lists support through 2028-07-31. EOL does not mean support has already ceased. Firmware compatibility differs for legacy-design product codes. Check the hardware code and firmware branch against the download-page warnings before updating. Hardware-tampering frequency, flash encryption and real-world attack frequency are not established by the reviewed evidence. The assessment deliberately omits an overall score until those gaps are resolved. [[Category:Classification]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
