You do not have permission to edit this page, for the following reasons:
'''Documentation-based security assessment β pending evidence completion and administrator review. No overall grade is assigned.''' == Device == * Product: Teltonika TRB245 * Brand: Teltonika * Model: TRB245 * Type: Industrial cellular gateway * Operating system: RutOS * Website: [https://wiki.teltonika-networks.com/view/TRB245 Official model documentation] * Exact commercial release date: unverified == Device security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Known hardware tampering || Unscored || [https://wiki.teltonika-networks.com/view/TRB245_Device_Recovery_Options Source] || Malicious hardware-tampering frequency has not been established. Documented recovery mechanisms are not measurements of attack incidence. |- | Known vulnerabilities || Very common || [https://wiki.teltonika-networks.com/view/TRB245_Firmware_Downloads Source] || The model firmware history lists multiple CVE patches. This concerns historical vulnerability exposure; it does not mean patched firmware remains affected. |- | Prior attacks || Unscored || [https://www.teltonika-networks.com/support/security-centre Source] || Model-specific real-world exploitation frequency has not been established. Security advisories and patches alone do not demonstrate attacks. |- | Updatability || Rare || [https://wiki.teltonika-networks.com/view/TRB245_Firmware_Downloads Source] || TRB2_R_00.07.14.5 (2026-04-15) is listed. Recent updates are sparse and the model is in EOL transition; support has not yet ended. Availability does not prove installation. |} == System security == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Authentication with other systems || Partial || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || Certificate-based services are configurable. Universal mutual authentication across all interfaces is not established. |- | Communications || Plain HTTP possible in documented defaults || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || HTTP and HTTPS access default on, while HTTPS redirection defaults off. Scope: management defaults, not a claim that all traffic is plaintext. |- | Storage encryption || Unscored || [https://wiki.teltonika-networks.com/view/TRB245_Maintenance Source] || Encryption of exported archives is documented, but does not establish encryption of resident flash. Whole-flash encryption remains unverified. |} == User authentication == {| class="wikitable" ! Criterion !! Assessment !! Evidence !! Comment |- | Account management || Full || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || Separate WebUI users and configurable read/write permission groups are documented. SSH account management has separate constraints. |- | Authentication || Basic baseline || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || Password login is the baseline. Optional stronger methods require configuration; deployed settings and recovery security were not tested. |- | Brute-force protection || Exist || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || IP blocking defaults on for failed SSH/WebUI logins, with a configurable threshold of 10 attempts. |- | Event logging || Partial logging || [https://wiki.teltonika-networks.com/view/TRB245_Administration Source] || Failed-login source, protocol and status are documented. Persistent retention and complete access auditing remain unverified. |- | Passwords || Require change after setup with complexity requirements || [https://wiki.teltonika-networks.com/view/QSG_TRB245 Source] || The quick start guide requires changing the default password before using WebUI, with at least eight characters, uppercase, lowercase and a digit. |} == Scope and evidence gaps == Documentation review dated 2026-10-25; no hands-on testing. Ratings describe the cited documentation, not every firmware version or installed configuration. Hardware-tampering frequency, resident-flash encryption and real-world attack frequency remain unscored. The exact commercial release date is unverified. No overall grade is assigned; administrator review and additional evidence are needed. The [https://www.teltonika-networks.com/support/eol-products vendor EOL table] lists support through 2030-06-13. EOL transition does not mean support has already ceased. [[Category:Classification]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
