Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an...
Vulnerability Description
Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform. If the user has not disabled the "RMS management feature" enabled by default, then an attacker could register that device to themselves. This could enable the attacker to perform different operations on the user's devices, including remote code execution with 'root' privileges (using the 'Task Manager' feature on RMS).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2586
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Roni Gavrilov
- OTORIO
More from Teltonika
View All →Affected Vendor
Teltonika
View all reports →