Authentication Bypass Issue in Teltonika Remote Management System

CVE-2023-32347

What is CVE-2023-32347?

Teltonika's Remote Management System prior to version 4.10.0 is susceptible to an authentication bypass vulnerability. This issue arises because the system relies on device serial numbers and MAC addresses for device identification and authentication. If an attacker gains access to a device's serial number and MAC address, they can impersonate that device. This unauthorized access may allow them to extract sensitive communication credentials, leading to potential arbitrary command execution with root privileges through the management functions associated with the compromised device.

References