PT-2023-23740 · Teltonika · Teltonika'S Remote Management System

Noam Moshe + 2 · Publicado 2023-05-22 · Atualizado 2023-05-31 · CVE-2023-32347

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teltonika’s Remote Management System versions prior to 4.10.0

Description The issue concerns the use of device serial numbers and MAC addresses for device identification and authentication. If an attacker obtains the serial number and MAC address of a device, they could authenticate as that device, steal its communication credentials, and potentially enable arbitrary command execution as root. This could be achieved by utilizing management options within newly registered devices.

Recommendations For versions prior to 4.10.0, update to version 4.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to device management options to minimize the risk of exploitation. Additionally, ensure that device serial numbers and MAC addresses are kept confidential to prevent unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-32347

Produtos afetados

Teltonika'S Remote Management System

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-32347 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-131-08 · Nota
• https://t.me/cvenotify/51511 · Publicação no Telegram
• https://t.me/cibsecurity/64535 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-32347 · Aviso do Fabricante