Most critical vulnerabilities affecting RMS

CVE-2023-32346 is a Observable Response Discrepancy vulnerability that allows the attacker to get a list of the serial numbers and MAC addresses of all devices cloud-connected to the Remote Management System. Using this as a starting point, the obtained Information can be used In subsequent exploits.

CVE-2023-32347 is an Improper authentication vulnerability that allows an attacker to enable arbitrary command execution as root by utilizing management options within the newly registered devices. An attacker only needs the serial number and MAC address of a device for authentication

CVE-2023-32348 Is an SSRF vulnerability that allows an attacker to route a connection to a remote server through the OpenVPN feature present In the RMS. This enables the attacker o scan and access data from other Teltonika devices connected to the VPN

CVE-2023-2586 Is a Improper authentication vulnerability that allows an unauthorized attacker registering previously unregistered devices through the RMS platform. This could enable the attacker to perform different operations on the user's devices, including remote code execution with 'root' privileges.

Most critical vulnerabilities affect RUT routers

CVE-2023-32350 Is an OS command Injection vulnerability present In the Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.

The attack vector Is adjacent, but considering the vulnerabilities present In the RMS, an attacker could easily pivot towards the RUT routers.