CVE-2023-32349

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-22 · updated 2026-06-17
Weakness: CWE-15

Description

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.

Affected products

Teltonika-Networks Rut200 Firmware: through 00.07.03.4
Teltonika-Networks Rut240 Firmware: through 00.07.03.4
Teltonika-Networks Rut241 Firmware: through 00.07.03.4
Teltonika-Networks Rut300 Firmware: through 00.07.03.4
Teltonika-Networks Rut360 Firmware: through 00.07.03.4
Teltonika-Networks Rut901 Firmware: through 00.07.03.4
Teltonika-Networks Rut950 Firmware: through 00.07.03.4
Teltonika-Networks Rut951 Firmware: through 00.07.03.4
Teltonika-Networks Rut955 Firmware: through 00.07.03.4
Teltonika-Networks Rut956 Firmware: through 00.07.03.4
Teltonika-Networks Rutx08 Firmware: through 00.07.03.4
Teltonika-Networks Rutx09 Firmware: through 00.07.03.4
Teltonika-Networks Rutx10 Firmware: through 00.07.03.4
Teltonika-Networks Rutx11 Firmware: through 00.07.03.4
Teltonika-Networks Rutx12 Firmware: through 00.07.03.4
Teltonika-Networks Rutx14 Firmware: from 00.07.00 through 00.07.03.4
Teltonika-Networks Rutx50 Firmware: from 00.07.00 through 00.07.03.4
Teltonika-Networks Rutxr1 Firmware: from 00.07.00 through 00.07.03.4

References

Get alerted when CVE-2023-32349 or the next vulnerability affects your stack