PT-2023-23740 · Teltonika · Teltonika'S Remote Management System

Noam Moshe + 2 · Published 2023-05-22 · Updated 2023-05-31 · CVE-2023-32347

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teltonika’s Remote Management System versions prior to 4.10.0

Description The issue concerns the use of device serial numbers and MAC addresses for device identification and authentication. If an attacker obtains the serial number and MAC address of a device, they could authenticate as that device, steal its communication credentials, and potentially enable arbitrary command execution as root. This could be achieved by utilizing management options within newly registered devices.

Recommendations For versions prior to 4.10.0, update to version 4.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to device management options to minimize the risk of exploitation. Additionally, ensure that device serial numbers and MAC addresses are kept confidential to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-32347

Affected Products

Teltonika'S Remote Management System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-32347 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32347 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-23-131-08 · Note
• https://t.me/cvenotify/51511 · Telegram Post
• https://t.me/cibsecurity/64535 · Telegram Post