CVE-2023-32348

CVE-2023-32348 affects Teltonika RMS (pre-4.10.0) and related RUT routers. The issue arises from the RMS VPN hub feature using OpenVPN, which allows new devices to communicate with all VPN-connected devices and enables routing through the OpenVPN server. This can let an attacker route traffic to ...

CVE-2023-32347

Teltonika RMS and related RUT devices are affected by multiple CVEs (CVE-2023-32346/32347/32348/32349/32350, and 32358 in some sources) affecting authentication, device claiming, SSRF, remote code execution, and OS command injection. Affected: RMS versions prior to 4.10.0 (and 4.14.0 for CVE-2023...

CVE-2023-32347

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, th...

CVE-2023-32347

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, th...

CVE-2023-32346

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a device has already been claimed, or whether th...

CVE-2023-32346

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a device has already been claimed, or whether th...

CVE-2023-32346

Teltonika RMS (Remote Management System) and RUT router firmware are affected by multiple CVEs (CVE-2023-32346, -32347, -32348, -2586, -2587, -2588, -32349, -32350) affecting versions prior to 4.10.0 (RMS) and prior to 4.14.0 (RMS, per CVE-2586) / 00.07.00–00.07.03.x (RUT). The root causes includ...

PT-2023-23741 · Teltonika · Teltonika'S Remote Management System

Name of the Vulnerable Software and Affected Versions: Teltonika’s Remote Management System versions prior to 4.10.0 Description: The issue concerns the virtual private network VPN hub feature in Teltonika’s Remote Management System, which utilizes OpenVPN for cross-device communication. This...

PT-2023-20351 · Teltonika · Teltonika'S Remote Management System

Name of the Vulnerable Software and Affected Versions: Teltonika’s Remote Management System versions prior to 4.10.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the main page of the web interface. An attacker with the MAC address and serial number of a connect...

New Strain of Sotdas Malware Discovered

Introduction There are numerous malicious codes that are currently active on smart devices, such as Ddosf, Dofloo, Gafgyt, MrBlack, Persirai, Sotdas, Tsunami, Triddy, Mirai, Moose, and Satori, among others. These malicious codes and their variants can intrude into and control smart devices throug...

Threat Group UNC3944 Abusing Azure Serial Console for Total VM Takeover

A financially motivated cyber actor has been observed abusing Microsoft Azure Serial Console on virtual machines VMs to install third-party remote management tools within compromised environments. Google-owned Mandiant attributed the activity to a threat group it tracks under the name UNC3944,...

Threat Group UNC3944 Abusing Azure Serial Console for Total VM Takeover

A financially motivated cyber actor has been observed abusing Microsoft Azure Serial Console on virtual machines VMs to install third-party remote management tools within compromised environments. Google-owned Mandiant attributed the activity to a threat group it tracks under the name UNC3944 ,...

Teltonika Remote Management System 代码问题漏洞

Teltonika Remote Management System is a Teltonika remote management system for managing Teltonika products. A code issue vulnerability exists in Teltonika Remote Management System versions prior to 4.10.0. An attacker could use this vulnerability to scan and access data from other Teltonika devic...

Teltonika Remote Management System 安全漏洞

Teltonika Remote Management System is a Teltonika remote management system for managing Teltonika products. A security vulnerability exists in Teltonika Remote Management System versions prior to 4.10.0. An attacker exploiting this vulnerability could create a list containing the serial numbers a...

Teltonika Remote Management System 授权问题漏洞

Teltonika Remote Management System is a Teltonika remote management system for managing Teltonika products. An authorization issue vulnerability exists in Teltonika Remote Management System versions prior to 4.14.0, which arises from incorrect authentication and can be exploited by an attacker to...

Teltonika Remote Management System 授权问题漏洞

Teltonika Remote Management System is a Teltonika remote management system for managing Teltonika products. An authorization issue vulnerability exists in Teltonika Remote Management System versions prior to 4.10.0. An attacker could use this vulnerability to execute arbitrary commands as root by...

Teltonika Remote Management System and RUT Model Routers

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Teltonika Equipment: Remote Management System and RUT model routers Vulnerabilities: Observable Response Discrepancy, Improper Authentication, Server-Side Request Forgery, Cross-site Scripting, Inclusio...

PT-2023-3014 · Teltonika · Teltonika'S Remote Management System

Name of the Vulnerable Software and Affected Versions: Teltonika’s Remote Management System versions prior to 4.10.0 Description: The issue allows users to access managed devices’ local secure shell SSH/web management services over the cloud proxy. A user can request a web proxy and obtain a URL ...

Critical PaperCut Security Vulnerabilities Actively Exploited in the Wild

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Attackers are leveraging severe vulnerabilities in PaperCut MF/NG software to install Atera remote management software, posing a significant risk due to proof-of-concept exploits being available...

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

Print management software provider PaperCut said that it has "evidence to suggest that unpatched servers are being exploited in the wild," citing two vulnerability reports from cybersecurity company Trend Micro. "PaperCut has conducted analysis on all customer reports, and the earliest signature ...