PT-2024-4031 · Teltonika · Teltonika Rut240

Published 2024-02-16 · Updated 2025-05-30 · CVE-2023-31728

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Teltonika RUT240 versions prior to 07.04.2

Description The issue is related to incorrect access control in the firmware of Teltonika RUT240 devices. When bridge mode is used, SSH and HTTP services may be made available on the IPv6 WAN interface, even though the UI indicates they are only available on the LAN interface. This could allow a remote attacker to bypass existing security restrictions and gain unauthorized access to the IPv6 WAN interface.

Recommendations For versions prior to 07.04.2, update the firmware to version 07.04.2 or later to resolve the issue. As a temporary workaround, consider disabling bridge mode or restricting access to the IPv6 WAN interface until a patch is available. Avoid using the SSH and HTTP services on the IPv6 WAN interface until the issue is resolved.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-04467

CVE-2023-31728

Affected Products

Teltonika Rut240

References · 12

• https://bdu.fstec.ru/vul/2024-04467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-31728 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31728 · Vendor Advisory
• https://research.exoticsilicon.com/news · Note
• https://twitter.com/Esparta6108713/status/1758710881972588842 · Twitter Post
• https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup · Note
• https://twitter.com/CVEnew/status/1758707647241699639 · Twitter Post
• https://t.me/cvenotify/100335 · Telegram Post
• https://t.me/cvenotify/71838 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/291276 · Note
• https://twitter.com/VulmonFeeds/status/1758745950728643010 · Twitter Post
• https://t.me/cvenotify/124160 · Telegram Post