CVE-2025-4687
High
Description
In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account and their company can then be managed by the attacker.This issue affects RMS: before 5.7.
SeverityHigh
CVSS7.2
Exploit probability—
ProductRMS
PublishedMay 29, 2025
First seenMay 29, 2025
Weakness typeCWE-288CWE-288
How to fix
Update
- Teltonika Networks RMS5.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Teltonika Networks RMS | v < 5.7 | 5.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.