CVE-2023-32348 Server-side request forgery in Remote Management System
Attackers can route connections through the OpenVPN server to scan and access data from other devices on the Teltonika VPN network.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32348?
CVE-2023-32348 is a medium-severity server-side request forgery vulnerability in Teltonika Remote Management System, published on 22 May 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN. It connects new devices in a manner that allows the new device to communicate with all Teltonika devices connected to the VPN. The OpenVPN server also allows users to route through it. An attacker could route a connection to a remote server through the OpenVPN server, enabling them to scan and access data from other Teltonika devices connected to the VPN.
Weakness: CWE-918
Which versions are affected by CVE-2023-32348?
It affects 1 product.
Products include Teltonika Remote Management System.
How do I fix CVE-2023-32348?
No fix has been published for CVE-2023-32348 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2023-32348 being exploited?
There is no known exploitation of CVE-2023-32348 in the wild and no public exploit code.
Other vulnerabilities in Teltonika Remote Management System
Sources
Also known as GHSA-jj25-48fw-gp3v.