CVE-2023-32350 (published 2023-05-22T15:14:57.025Z)

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.


Affected products: Vendor: Teltonika
Product: RUT model routers
Versions: 00.07.00