Teltonika Remote Management System and RUT Model Routers
Successful exploitation of these vulnerabilities could expose sensitive device information and device credentials, enable remote code execution, expose connected devices managed on the network, and allow impersonation of legitimate devices.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32350US | high8.8 | — | ||
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit… | ||||
| CVE-2023-32349US | high8.8 | — | ||
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validat… | ||||
| CVE-2023-32348US | medium5.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN. It connects new… | ||||
| CVE-2023-2588US | high8.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (SSH)/web management services over the cl… | ||||
| CVE-2023-2587US | high8.3 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface. An attacker with the MAC ad… | ||||
| CVE-2023-2586US | critical9.8 | — | ||
Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform. If the user ha… | ||||
| CVE-2023-32347US | critical9.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and fro… | ||||
| CVE-2023-32346US | medium5.3 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the s… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-131-08 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-131-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationRUT model routers
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRUT model routers
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- FixedRUT model routers
Users can download the latest version of their respective RUT model routers by navigating to the appropriate device on Teltonika's website.
https://wiki.teltonika-networks.com/view/MainPage - FixedRUT model routers
Users can download the latest version of their respective RUT model routers by navigating to the appropriate device on Teltonika's website.
https://wiki.teltonika-networks.com/view/MainPage
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan