CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-32350
High (8.8) in teltonika-networks. EPSS 1.5% chance of exploitation in the next 30 days.
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- teltonika-networks:rut200_firmware
- teltonika-networks:rut240_firmware
- teltonika-networks:rut241_firmware
- teltonika-networks:rut300_firmware
- teltonika-networks:rut360_firmware
- teltonika-networks:rut901_firmware
- teltonika-networks:rut950_firmware
- teltonika-networks:rut951_firmware
- teltonika-networks:rut955_firmware
- teltonika-networks:rut956_firmware
- teltonika-networks:rutx08_firmware
- teltonika-networks:rutx09_firmware
- teltonika-networks:rutx10_firmware
- teltonika-networks:rutx11_firmware
- teltonika-networks:rutx12_firmware
- teltonika-networks:rutx14_firmware
- teltonika-networks:rutx50_firmware
- teltonika-networks:rutxr1_firmware