CVE Feed

    Dashboard / CVE / CVE-2023-32350

    CVE-2023-32350

    Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.

    Published:May 22, 2023
    Last Modified:Jan 16, 2025
    EPS:May 22, 2023
    EPSS Score:0.00396
    CVSS Score:8

    Affected Products

    Vendor
    Teltonika-networks
    Product
    Rut200
    Vendor
    Teltonika-networks
    Product
    Rut200 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut240
    Vendor
    Teltonika-networks
    Product
    Rut240 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut241
    Vendor
    Teltonika-networks
    Product
    Rut241 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut300
    Vendor
    Teltonika-networks
    Product
    Rut300 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut360
    Vendor
    Teltonika-networks
    Product
    Rut360 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut901
    Vendor
    Teltonika-networks
    Product
    Rut901 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut950
    Vendor
    Teltonika-networks
    Product
    Rut950 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut951
    Vendor
    Teltonika-networks
    Product
    Rut951 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut955
    Vendor
    Teltonika-networks
    Product
    Rut955 Firmware
    Vendor
    Teltonika-networks
    Product
    Rut956
    Vendor
    Teltonika-networks
    Product
    Rut956 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx08
    Vendor
    Teltonika-networks
    Product
    Rutx08 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx09
    Vendor
    Teltonika-networks
    Product
    Rutx09 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx10
    Vendor
    Teltonika-networks
    Product
    Rutx10 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx11
    Vendor
    Teltonika-networks
    Product
    Rutx11 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx12
    Vendor
    Teltonika-networks
    Product
    Rutx12 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx14
    Vendor
    Teltonika-networks
    Product
    Rutx14 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutx50
    Vendor
    Teltonika-networks
    Product
    Rutx50 Firmware
    Vendor
    Teltonika-networks
    Product
    Rutxr1
    Vendor
    Teltonika-networks
    Product
    Rutxr1 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High