CVEvulnerability
CVE-2023-31728
7.0 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.
Affected configurations
• teltonika-networks rut240 firmware (< 00.07.04.2)
References
- https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup Third Party Advisory
- https://research.exoticsilicon.com/news Third Party Advisory
- https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup Third Party Advisory
- https://research.exoticsilicon.com/news Third Party Advisory