Read the docs
TI-2023-15638 Aliases CVE-2023-32347GHSA-3gwj-m7cm-jpgq

Improper authentication in Teltonika Remote Management System

Priority MEDIUM 43CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, they could authenticate as that device and steal communication credentials of the device. This could allow an attacker to enable arbitrary command execution as root by utilizing management options within the newly registered devices.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00665 52nd percentileScored 2026-11-07
Fix Fixed Remote Management System (Teltonika): 4.10.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TeltonikaRemote Management Systembefore 4.10.04.10.0Patch availableCNA
  • Remote Management System VendorTeltonika Affected before 4.10.0 Fixed in 4.10.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:teltonika:remote_management_system:*:*:*:*:*:*:*:*before 4.10.0VulnerableTeltonika
  • cpe:2.3:a:teltonika:remote_management_system:*:*:*:*:*:*:*:* Versions before 4.10.0 Vulnerable ·Teltonika

Remediation

  • Fix · CNA Remote Management System (Teltonika) Fixed in 4.10.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Teltonika Remote Management System 4.10.0

    5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2023-02418 Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing…Priority MEDIUM 42
    • TI-2023-02417 Cross-site scripting in Teltonika Remote Management SystemPriority MEDIUM 40
    • TI-2023-15639 Server-side request forgery in Teltonika Remote Management SystemPriority LOW 33
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-32347
  2. 2026-10-03 Alias added: GHSA-3gwj-m7cm-jpgq

References

Advisory 1

  • TI-2023-02416 Improper authentication in Teltonika Remote Management System CVSS 3.1CRITICAL 9.8
  • TI-2023-02418 Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing… CVSS 3.1HIGH 8.8
  • TI-2023-02417 Cross-site scripting in Teltonika Remote Management System CVSS 3.1HIGH 8.3
  • TI-2023-15639 Server-side request forgery in Teltonika Remote Management System CVSS 3.1MEDIUM 5.8
  • TI-2023-15637 Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that… CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences