You do not have permission to edit this page, for the following reasons:
'''Documentation-based security assessment β pending evidence completion and administrator review. No overall grade is assigned.''' == Device == * Product: Teltonika RUTM55 * Brand: Teltonika * Model: RUTM55 * Type: Router * Operating system: RutOS * Website: [https://wiki.teltonika-networks.com/view/RUTM55 Official model documentation] * Exact commercial release date: unverified == Device security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Known hardware tampering || Unscored || [https://wiki.teltonika-networks.com/view/RUTM55_Device_Recovery_Options Source] || Malicious hardware-tampering frequency has not been established. Documented recovery mechanisms are not measurements of attack incidence. |- | Known vulnerabilities || Very common || [https://wiki.teltonika-networks.com/view/RUTM55_Firmware_Downloads Source] || The model firmware history lists multiple CVE patches. This concerns historical vulnerability exposure; it does not mean patched firmware remains affected. |- | Prior attacks || Unscored || [https://www.teltonika-networks.com/support/security-centre Source] || Model-specific real-world exploitation frequency has not been established. Security advisories and patches alone do not demonstrate attacks. |- | Updatability || Very common || [https://wiki.teltonika-networks.com/view/RUTM55_Firmware_Downloads Source] || The history includes RUTM_R_00.07.25.3 (2026-09-24). Multiple dated releases and security fixes are documented. Availability does not prove installation. |} == System security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Authentication with other systems || Partial || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || Certificate-based services are configurable. Universal mutual authentication across all interfaces is not established. |- | Communications || HTTPS management documented || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || HTTPS and HTTP-to-HTTPS redirection default on; remote HTTPS defaults off. Scope: management access. Other traffic and negotiated ciphers were not tested. |- | Storage encryption || Unscored || [https://wiki.teltonika-networks.com/view/RUTM55_Maintenance Source] || Encryption of exported archives is documented, but does not establish encryption of resident flash. Whole-flash encryption remains unverified. |} == User authentication == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Account management || Full || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || Separate WebUI users and configurable read/write permission groups are documented. SSH account management has separate constraints. |- | Authentication || Basic baseline || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || Password login is the baseline. Optional stronger methods require configuration; deployed settings and recovery security were not tested. |- | Brute-force protection || Exist || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || IP blocking defaults on for failed SSH/WebUI logins, with a configurable threshold of 10 attempts. |- | Event logging || Partial logging || [https://wiki.teltonika-networks.com/view/RUTM55_Administration Source] || Failed-login source, protocol and status are documented. Persistent retention and complete access auditing remain unverified. |- | Passwords || Require change after setup with complexity requirements || [https://wiki.teltonika-networks.com/view/RUTM55_Setup_Wizard Source] || First WebUI login requires replacing the default password; the manual specifies 8β32 characters, uppercase, lowercase, a digit and a special character. |} == Scope and evidence gaps == Documentation review dated 2026-10-25; no hands-on testing. Ratings describe the cited documentation, not every firmware version or installed configuration. Hardware-tampering frequency, resident-flash encryption and real-world attack frequency remain unscored. The exact commercial release date is unverified. No overall grade is assigned; administrator review and additional evidence are needed. [[Category:Classification]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
