1. Home
  2. CVE Database
  3. CVE-2023-32349
HIGH · 8.0

CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are store...

Vulnerability Description

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.

CVSS Score

8.0

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Teltonika-NetworksRut200 Firmware<= 00.07.03.4
Teltonika-NetworksRut200-
Teltonika-NetworksRut240 Firmware<= 00.07.03.4
Teltonika-NetworksRut240-
Teltonika-NetworksRut241 Firmware<= 00.07.03.4
Teltonika-NetworksRut241-
Teltonika-NetworksRut300 Firmware<= 00.07.03.4
Teltonika-NetworksRut300-
Teltonika-NetworksRut360 Firmware<= 00.07.03.4
Teltonika-NetworksRut360-
Teltonika-NetworksRut901 Firmware<= 00.07.03.4
Teltonika-NetworksRut901-
Teltonika-NetworksRut950 Firmware<= 00.07.03.4
Teltonika-NetworksRut950-
Teltonika-NetworksRut951 Firmware<= 00.07.03.4
Teltonika-NetworksRut951-
Teltonika-NetworksRut955 Firmware<= 00.07.03.4
Teltonika-NetworksRut955-
Teltonika-NetworksRut956 Firmware<= 00.07.03.4
Teltonika-NetworksRut956-

Related Weaknesses (CWE)

CWE-15

References

FAQ

What is CVE-2023-32349?

CVE-2023-32349 is a vulnerability with a CVSS score of 8.0 (HIGH). Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are store...

How severe is CVE-2023-32349?

CVE-2023-32349 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-32349?

Check the references section above for vendor advisories and patch information. Affected products include: Teltonika-Networks Rut200 Firmware, Teltonika-Networks Rut200, Teltonika-Networks Rut240 Firmware, Teltonika-Networks Rut240, Teltonika-Networks Rut241 Firmware.