Teltonika RUT361 (RUT361)

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Physical access permits reset-button and bootloader recovery. Rare denotes limited physical attack surface, not a measured incident rate.
Known vulnerabilities	Very common	🔗 Proof	The firmware history lists numerous CVE fixes. Historical exposure is scored; patched releases must not be assumed currently vulnerable.
Prior attacks	None	🔗 Proof	No model-specific in-the-wild attack was identified in the reviewed public material as of 2026-10-24. None means no located report, not proof of absence.
Updatability	Very common	🔗 Proof	Multiple dated firmware releases and security fixes; latest listed release reviewed: 2026-10-12.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Certificates and authenticated services are configurable; SMTP credentials and secure connection are optional. Authentication is therefore configuration-dependent.
Communications	Encrypted with up-to-date encryption	🔗 Proof	Supports HTTPS/TLS, modern VPNs and AES-based Wi-Fi. This rates secure capability; insecure legacy protocols must be disabled.
Storage	No encryption	🔗 Proof	Conservative inference for configuration storage: raw configuration archives are unencrypted by default; backup AES-256 is optional. Whole-flash encryption is not established by these documents.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Separate users, editable group permissions and password management are documented.
Authentication	Basic	🔗 Proof	Password-based login; key-based SSH and OTP are available but optional. Physical recovery remains possible. Basic is a conservative default-configuration assessment.
Brute-force protection	Exist	🔗 Proof	IP blocking after failed SSH/WebUI attempts; default threshold is 10.
Event logging	Access event logged	🔗 Proof	System/event logs plus failed-login records and session access timestamps. Retention depends on RAM/flash/remote-log configuration.
Passwords	Require change after setup with complexity requirements	🔗 Proof	First login forces a new password with at least 8 characters including uppercase, lowercase and a digit.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	RutOS (OpenWrt-based Linux) (Companion App: )
Hardware (CPU / GPU)	CPU: MediaTek MIPS 24KEc, 580 MHz • GPU:
Memory & Storage	Memory: 128 MB DDR2 • Storage: 16 MB serial NOR flash
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: LTE Cat 6; Wi-Fi; 2 x 10/100 Ethernet
Physical (Dimensions & Mass)	Dimensions: 100 x 30 x 85 mm • Mass:

Assessment scope

Documentation-based assessment on 2026-10-24; no hands-on penetration test. Ratings refer to documented capabilities and historical exposure. Where the form lacks an Unknown option, uncertainty is explicitly stated in the criterion comment.

Release date uses the manufacturer introduction date, 28 February 2024: official introduction. Hardware specifications: manufacturer product page.

Storage rating is provisional: the cited manual establishes unencrypted configuration backups by default, not a forensic finding about every flash region. Administrator review of the storage criterion is requested.