CVE-2023-32349
Estado: ModificadaAlta (8.8)—
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.09%
- Percentil entre todas las CVEs puntuadas: 64
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (18)
Teltonika-networks — Rut200 FirmwareTeltonika-networks — Rut240 FirmwareTeltonika-networks — Rut241 FirmwareTeltonika-networks — Rut300 FirmwareTeltonika-networks — Rut360 FirmwareTeltonika-networks — Rut901 FirmwareTeltonika-networks — Rut950 FirmwareTeltonika-networks — Rut951 FirmwareTeltonika-networks — Rut955 FirmwareTeltonika-networks — Rut956 FirmwareTeltonika-networks — Rutx08 FirmwareTeltonika-networks — Rutx09 FirmwareTeltonika-networks — Rutx10 FirmwareTeltonika-networks — Rutx11 FirmwareTeltonika-networks — Rutx12 FirmwareTeltonika-networks — Rutx14 FirmwareTeltonika-networks — Rutx50 FirmwareTeltonika-networks — Rutxr1 Firmware
CWE
- CWE-15
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-32349",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-32349",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-01-16T20:30:22.835417Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.1
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Teltonika",
"product": "RUT model routers",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "00.07.03.4"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-05-22T16:15:10.420",
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-15"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\nVersion 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.\n\n"
}
],
"lastModified": "2026-06-17T05:58:37.560",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AB8F92B-6B3D-412A-A36E-BD165B439790",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "66CE10C3-A271-49DC-9701-6AE683935027"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut240_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FD8F425-1562-4A17-B517-9584BDFC4AB5",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut240:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F67C4A2C-8603-4E97-886F-882DDE786B77"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut241_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "623F5042-542D-4B01-9E12-15E90F57D098",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut241:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "68F89383-8227-4925-868E-020522EA5FA3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE0E17D0-7D64-477A-BB04-8E276E47FD47",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44B9F0BE-0D55-46BA-8889-B31E22F42EFF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut360_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37E525C8-B479-400D-8C5A-5F27B477929D",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut360:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "912F95E0-8FC9-4A35-85C0-B3CA1CA8ADE7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut901_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E55A57-4A38-4071-B18F-0A129D530A88",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut901:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "733D27C1-D1AB-4900-9EE4-E0948EBDBDC5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut950_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF5D66A-A7AB-4C3D-8090-0EFA8AFA2480",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut950:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D52329E-82CC-4BF6-ACB4-96CD5E15AD8E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut951_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3291CBC4-8479-49E7-AE79-1299FA1F8EFF",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut951:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4297BE76-0B62-40BA-947D-7F41D4BBB3BB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut955_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7114BEC-D022-487E-B206-7D6B6F6CB9DD",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut955:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "57BD4813-8DE9-4CA4-BC8C-676107D704EB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rut956_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92EAE867-0272-4229-BC07-59D80BCF7AE8",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rut956:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB073896-35C5-4354-8025-657076C839A8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx08_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74419363-824F-409B-B6CD-3E2F0BB33461",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx08:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EDAC1E9D-485A-4484-8F02-5118DD70A881"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx09_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E475B89F-B08C-4517-8C8D-F23A04C6405A",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx09:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0DB7671D-3398-4AD1-B8BE-2C2A8F52EDBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A673AFF-28DD-49C7-BAF2-1218AF1BAAC4",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx10:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D33E1270-278E-408C-ADD6-9FB6ACF5A913"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx11_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61B226C0-1B25-4AB7-98A6-C0C6ACF10181",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx11:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7E889D3-F36F-41C4-BFAE-9E1F7AB71CED"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx12_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA7B224B-8AFD-47F4-9512-825EE1A8EC2A",
"versionEndIncluding": "00.07.03.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx12:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0D5F38B9-39B0-4519-8E12-2274F36F1DDB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx14_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48895EDD-7A87-4F7D-8A83-9AA6BC323A52",
"versionEndIncluding": "00.07.03.4",
"versionStartIncluding": "00.07.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx14:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "349D7DF3-C61D-4631-B202-88D54B3851DE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutx50_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "559A59FB-C6AB-4ADA-9275-6DE3448273EA",
"versionEndIncluding": "00.07.03.4",
"versionStartIncluding": "00.07.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutx50:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FB1FE5AD-FD6D-44D0-B5B5-80496E4DB5BD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:teltonika-networks:rutxr1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94D5F606-8DE7-4326-8C02-8A9B9C344659",
"versionEndIncluding": "00.07.03.4",
"versionStartIncluding": "00.07.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:teltonika-networks:rutxr1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "797BC6D8-187B-4630-BE66-5B0AF9836699"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}