Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (SSH)/web management services over the cloud proxy. A user can request a web proxy and obtain a URL in the Remote Management System cloud subdomain. This URL could be shared with others without Remote Management System authentication . An attacker could exploit this vulnerability to create a malicious webpage that uses a trusted and certified domain. An attacker could initiate a reverse shell when a victim connects to the malicious webpage, achieving remote code execution on the victim device.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 | Third Party Advisory US Government Resource |
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 | Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 07:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 - Third Party Advisory, US Government Resource |
31 May 2023, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Teltonika remote Management System
Teltonika |
|
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:teltonika:remote_management_system:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
Information
Published : 2023-05-22 16:15
Updated : 2024-11-21 07:58
NVD link : CVE-2023-2588
Mitre link : CVE-2023-2588
CVE.ORG link : CVE-2023-2588
JSON object : View
Products Affected
teltonika
- remote_management_system
CWE
CWE-830
Inclusion of Web Functionality from an Untrusted Source