8.8
CVE-2023-32349
- EPSS 0.98%
- Veröffentlicht 22.05.2023 16:15:10
- Zuletzt bearbeitet 21.11.2024 08:03:09
- Erkennungen
LoginVersion 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Teltonika-networks ≫ Rut200 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut240 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut241 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut300 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut360 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut901 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut950 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut951 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut955 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rut956 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx08 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx09 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx10 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx11 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx12 Firmware Version <= 00.07.03.4
Teltonika-networks ≫ Rutx14 Firmware Version >= 00.07.00 <= 00.07.03.4
Teltonika-networks ≫ Rutx50 Firmware Version >= 00.07.00 <= 00.07.03.4
Teltonika-networks ≫ Rutxr1 Firmware Version >= 00.07.00 <= 00.07.03.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.98% | 0.575 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| DHS.gov | 8 | 2.1 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-15 External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08