CVE-2023-32350: Teltonika-Networks RUT200 Firmware

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.

Affected products

• Teltonika-Networks RUT200 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT240 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT241 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT300 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT360 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT901 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT950 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT951 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT955 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUT956 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX08 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX09 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX10 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX11 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX12 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX14 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTX50 Firmware: from 00.07.00, up to and including 00.07.03
• Teltonika-Networks RUTXR1 Firmware: from 00.07.00, up to and including 00.07.03

Published 2023-05-22. Last modified 2026-06-17.