Teltonika Remote Management System and RUT Model Routers
Successful exploitation of these vulnerabilities could expose sensitive device information and device credentials, enable remote code execution, expose connected devices managed on the network, and allow impersonation of legitimate devices.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-32350US | high8.8 | — | ||
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit… | ||||
| CVE-2023-32349US | high8.8 | — | ||
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validat… | ||||
| CVE-2023-32348US | medium5.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN. It connects new… | ||||
| CVE-2023-2588US | high8.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (SSH)/web management services over the cl… | ||||
| CVE-2023-2587US | high8.3 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface. An attacker with the MAC ad… | ||||
| CVE-2023-2586US | critical9.8 | — | ||
Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform. If the user ha… | ||||
| CVE-2023-32347US | critical9.8 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and fro… | ||||
| CVE-2023-32346US | medium5.3 | — | ||
Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-131-08 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-131-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationRUT model routers
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRUT model routers
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- MitigationRemote Management System (RMS)
Remote Management System (RMS) services have already been updated to versions, which fix these vulnerabilities.
- BehobenRUT model routers
Users can download the latest version of their respective RUT model routers by navigating to the appropriate device on Teltonika's website.
https://wiki.teltonika-networks.com/view/MainPage - BehobenRUT model routers
Users can download the latest version of their respective RUT model routers by navigating to the appropriate device on Teltonika's website.
https://wiki.teltonika-networks.com/view/MainPage
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan