PT-2023-23742 · Teltonika · Teltonika Rut

Claroty Research + 2 · Published 2023-05-22 · Updated 2023-06-01 · CVE-2023-32349

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teltonika RUT router firmware versions 00.07.00 through 00.07.03.4

Description The packet dump utility in the firmware contains proper validation for filter parameters, but the variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, potentially resulting in arbitrary code execution.

Recommendations For versions 00.07.00 through 00.07.03.4, consider restricting access to the UCI configuration utility to prevent modification of the validation variables. As a temporary workaround, consider disabling the packet dump utility until a patch is available.

Fix

Weakness Enumeration

CWE-15

Related Identifiers

CVE-2023-32349

Affected Products

Teltonika Rut

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-32349 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32349 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-23-131-08 · Note
• https://t.me/cibsecurity/64557 · Telegram Post