CVE-2023-32349: Teltonika-Networks RUT200 Firmware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.

Affected products

• Teltonika-Networks RUT200 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT240 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT241 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT300 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT360 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT901 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT950 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT951 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT955 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUT956 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX08 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX09 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX10 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX11 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX12 Firmware: up to and including 00.07.03.4
• Teltonika-Networks RUTX14 Firmware: from 00.07.00, up to and including 00.07.03.4
• Teltonika-Networks RUTX50 Firmware: from 00.07.00, up to and including 00.07.03.4
• Teltonika-Networks RUTXR1 Firmware: from 00.07.00, up to and including 00.07.03.4

Published 2023-05-22. Last modified 2026-06-17.