{"id":"CVE-2023-31728","state":"PUBLISHED","title":"Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows t","description":"Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.","publishedAt":"2024-02-17T00:00:00.000Z","updatedAt":"2024-11-01T19:04:41.139Z","severity":{"score":7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup","https://research.exoticsilicon.com/news"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/31xxx/CVE-2023-31728.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-31728","state":"PUBLISHED","datePublished":"2024-02-17T00:00:00.000Z","dateUpdated":"2024-11-01T19:04:41.139Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2023-04-29T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup"},{"url":"https://research.exoticsilicon.com/news"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-02-17T04:00:26.166Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup","tags":["x_transferred"]},{"url":"https://research.exoticsilicon.com/news","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T14:56:35.560Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"teltonika-networks","product":"rut240_firmware","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"07.04.2","versionType":"custom"}],"cpes":["cpe:2.3:o:teltonika-networks:rut240_firmware:-:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-11-01T18:57:08.545750Z","id":"CVE-2023-31728","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"type":"CWE","lang":"en","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-01T19:04:41.139Z"}}]}}}