PT-2023-3014 · Teltonika · Teltonika'S Remote Management System

Noam Moshe + 2 · Published 2023-05-11 · Updated 2023-05-31 · CVE-2023-2588

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Teltonika’s Remote Management System versions prior to 4.10.0

Description The issue allows users to access managed devices’ local secure shell (SSH)/web management services over the cloud proxy. A user can request a web proxy and obtain a URL in the Remote Management System cloud subdomain, which could be shared with others without Remote Management System authentication. An attacker could exploit this to create a malicious webpage that uses a trusted and certified domain. The attacker could initiate a reverse shell when a victim connects to the malicious webpage, achieving remote code execution on the victim device.

Recommendations For versions prior to 4.10.0, update to version 4.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the web proxy feature in the Remote Management System until a patch is applied. Additionally, avoid sharing URLs obtained through the web proxy feature with unauthenticated users to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-830

Related Identifiers

BDU:2023-03059

CVE-2023-2588

Affected Products

Teltonika'S Remote Management System

References · 5

• https://bdu.fstec.ru/vul/2023-03059 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-2588 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2588 · Vendor Advisory
• https://t.me/cibsecurity/64553 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-131-08 · Note