Teltonika Remote Management System and RUT Model Routers Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-32350)

Versions 00.07.00 through 00.07.03 of Teltonika's RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2023-32350

creationtimestamp| type| source ---|---|--- 2023-05-22 20:25:36+00:00| seen| https://t.me/cibsecurity/64548...

CVE-2023-32350

CVE-2023-32350 affects Teltonika RUT router firmware versions 00.07.00–00.07.03. The vulnerability is an OS command injection in a Lua service where an attacker could replace a user-provided package name with a malicious one to inject commands. The provided documents do not specify a fixed versio...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...