You do not have permission to edit this page, for the following reasons:
'''Documentation-based security assessment β pending evidence completion and administrator review. No overall grade is assigned.''' == Device == * Product: Teltonika TRB145 * Brand: Teltonika * Model: TRB145 * Type: Industrial cellular gateway * Operating system: RutOS * Website: [https://wiki.teltonika-networks.com/view/TRB145 Official model documentation] * Exact commercial release date: unverified == Device security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Known hardware tampering || Unscored || [https://wiki.teltonika-networks.com/view/TRB145_Device_Recovery_Options Source] || Physical factory reset is documented. This does not establish how frequently malicious hardware tampering occurs. |- | Known vulnerabilities || Very common || [https://wiki.teltonika-networks.com/view/TRB145_Firmware_Downloads Source] || The model's firmware history lists multiple CVE patches. This concerns historical vulnerabilities, not a claim that current patched firmware remains affected. |- | Prior attacks || Unscored || [https://www.teltonika-networks.com/support/security-centre Source] || Model-specific real-world exploitation frequency has not been established. Patch availability alone does not demonstrate attacks. |- | Updatability || Very common || [https://wiki.teltonika-networks.com/view/TRB145_Firmware_Downloads Source] || TRB1_R_00.07.24.6 (2026-10-12) is listed, alongside earlier releases and security fixes. Availability does not prove deployed units have installed updates. |} == System security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Authentication with other systems || Partial || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || Certificate-based services are configurable. Universal mutual authentication across all interfaces is not established. |- | Communications || HTTPS management documented || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || HTTPS and HTTP-to-HTTPS redirection default on; remote HTTPS defaults off. This assessment is limited to management access; cipher negotiation and other traffic were not tested. |- | Storage encryption || Unscored || [https://wiki.teltonika-networks.com/view/TRB145_Device_security Source] || Whole-flash encryption was not established from the accessible security documentation. No encryption-strength rating is assigned. |} == User authentication == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Account management || Full || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || Separate WebUI users and configurable read/write groups are documented. SSH account management has separate constraints. |- | Authentication || Basic baseline; optional 2FA || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || Password login is the baseline. The manual documents optional two-factor authentication, which requires configuration; deployed settings were not tested. |- | Brute-force protection || Exist || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || IP blocking defaults on for failed SSH/WebUI logins, with a configurable threshold of 10 attempts. |- | Event logging || Partial logging || [https://wiki.teltonika-networks.com/view/TRB145_Administration Source] || Failed-login source, protocol and status are documented. Session visibility does not establish complete persistent auditing or retention. |- | Passwords || Require change after setup with complexity requirements || [https://wiki.teltonika-networks.com/view/TRB145_Setup_Wizard Source] || First WebUI login requires replacing the default password; the manual specifies 8β32 characters, uppercase, lowercase, a digit and a special character. |} == Scope and evidence gaps == Documentation review dated 2026-10-25; no hands-on testing. Ratings describe documented features, not every firmware version or installed configuration. Hardware-tampering frequency, resident-flash encryption and real-world attack frequency remain unscored. The exact commercial release date is unverified. No overall security grade is assigned; administrator review and further evidence are needed. [[Category:Classification]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
