VYPR

Rutx10 Firmware

by Teltonika

CVEs (2)

  • CVE-2023-32350HigMay 22, 2023
    risk 0.52cvss 8.0epss 0.01

    Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead…

  • CVE-2023-32349HigMay 22, 2023
    risk 0.52cvss 8.0epss 0.01

    Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an…