High severity · published Feb 17, 2024
CVE-2023-31728
Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows…
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rut240 Firmware · Teltonika-networks
before 00.07.04.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-31728
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-31728
Third Party Advisory
https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup
Third Party Advisory
https://research.exoticsilicon.com/news
More from Rut240 Firmware
8.8
CVE-2023-32350
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service
8.8
CVE-2023-32349
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters