CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:teltonika-networks:rut240_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:teltonika-networks:rut240:-:*:*:*:*:*:*:*

History

30 May 2025, 15:38

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Teltonika-networks rut240
Teltonika-networks
Teltonika-networks rut240 Firmware
CPE cpe:2.3:o:teltonika-networks:rut240_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:teltonika-networks:rut240:-:*:*:*:*:*:*:*
References () https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup - () https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup - Third Party Advisory
References () https://research.exoticsilicon.com/news - () https://research.exoticsilicon.com/news - Third Party Advisory

21 Nov 2024, 08:02

Type Values Removed Values Added
References () https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup - () https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup -
References () https://research.exoticsilicon.com/news - () https://research.exoticsilicon.com/news -

01 Nov 2024, 19:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.0

17 Feb 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-17 04:15

Updated : 2025-05-30 15:38


NVD link : CVE-2023-31728

Mitre link : CVE-2023-31728

CVE.ORG link : CVE-2023-31728


JSON object : View

Products Affected

teltonika-networks

  • rut240
  • rut240_firmware