CVE-2023-32349 - CVE House
Back to Database
Status published High CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain...

Vulnerability Description

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32349

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Noam Moshe
  • Claroty Research

References

More from Teltonika

View All →
CVE-2023-32350
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain...
High 8
CVE-2023-32348
Teltonika’s Remote Management System versions prior to 4.10.0 contain a...
Medium 5.8
CVE-2023-32347
Teltonika’s Remote Management System versions prior to 4.10.0 use device...
High 8.1
CVE-2023-32346
Teltonika’s Remote Management System versions prior to 4.10.0 contain a...
Medium 5.3
CVE-2023-2588
Teltonika’s Remote Management System versions prior to 4.10.0 have a...
High 8.8

Affected Vendor

Affected Software

RUT model routers
Vulnerable Versions:
0

Timeline

Official Publish: May 22nd, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-15

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.