PT-2023-23742 · Teltonika · Teltonika Rut

Claroty Research + 2 · Publicado 2023-05-22 · Atualizado 2023-06-01 · CVE-2023-32349

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teltonika RUT router firmware versions 00.07.00 through 00.07.03.4

Description The packet dump utility in the firmware contains proper validation for filter parameters, but the variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, potentially resulting in arbitrary code execution.

Recommendations For versions 00.07.00 through 00.07.03.4, consider restricting access to the UCI configuration utility to prevent modification of the validation variables. As a temporary workaround, consider disabling the packet dump utility until a patch is available.

Correção

Enumeração de Fraquezas

CWE-15

Identificadores relacionados

CVE-2023-32349

Produtos afetados

Teltonika Rut

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-32349 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-131-08 · Nota
• https://osv.dev/vulnerability/CVE-2023-32349 · Aviso do Fabricante
• https://t.me/cibsecurity/64557 · Publicação no Telegram