CVE-2023-32347: Critical severity teltonika remote management system (rms) vulnerability
Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, they could authenticate as that device and steal communication credentials of the device. This could allow an attacker to enable arbitrary command execution as root by utilizing management options within the newly registered devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32347?
CVE-2023-32347 is classified as a high severity vulnerability due to its potential for device impersonation and unauthorized access.
How do I fix CVE-2023-32347?
To fix CVE-2023-32347, update the Teltonika Remote Management System to version 4.10.0 or later.
What devices are affected by CVE-2023-32347?
CVE-2023-32347 affects Teltonika Remote Management System versions prior to 4.10.0.
What type of attack can occur due to CVE-2023-32347?
An attacker could exploit CVE-2023-32347 by obtaining device serial numbers and MAC addresses, leading to unauthorized device claiming and access.
Is CVE-2023-32347 related to other vulnerabilities?
Yes, CVE-2023-32347 is related to multiple vulnerabilities affecting Teltonika devices, including CVE-2023-32346 and CVE-2023-32348.