CVE-2023-31728

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-17 · updated 2026-06-17

Description

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.

Affected products

Teltonika-Networks Rut240 Firmware: before 00.07.04.2 — fixed in 00.07.04.2

How to fix

Upgrade to a fixed version: Teltonika-Networks Rut240 Firmware 00.07.04.2. Check the vendor advisory for mitigations.

References

https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup
https://research.exoticsilicon.com/news
https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup
https://research.exoticsilicon.com/news

Get alerted when CVE-2023-31728 or the next vulnerability affects your stack