CVE-2023-31728
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Teltonika RUT router是一系列工业路由器。 Teltonika RUT240 07.04.2之前版本存在安全漏洞，该漏洞源于在使用桥接模式时，有时会在 IPv6 WAN 接口上提供 SSH 和 HTTP 服务。
Possible ATT&CK Techniques 2 AI
T1046 · Network Service Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-31728
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Teltonika RUT240 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Teltonika RUT router是一系列工业路由器。 Teltonika RUT240 07.04.2之前版本存在安全漏洞，该漏洞源于在使用桥接模式时，有时会在 IPv6 WAN 接口上提供 SSH 和 HTTP 服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2023-31728
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-31728
请登录查看更多情报信息。
Other References for CVE-2023-31728 (2)
Same Patch Batch · n/a · 2024-02-17 · 14 CVEs total
| CVE-2024-21495 | 6.5 MEDIUM | caddy-security 安全漏洞 |
| CVE-2024-21496 | 6.1 MEDIUM | caddy-security 安全漏洞 |
| CVE-2024-21494 | 5.4 MEDIUM | Caddy 安全漏洞 |
| CVE-2024-21497 | 5.4 MEDIUM | Caddy 安全漏洞 |
| CVE-2024-21493 | 5.3 MEDIUM | caddy-security 安全漏洞 |
| CVE-2024-21498 | 5.3 MEDIUM | Caddy 安全漏洞 |
| CVE-2024-21500 | 4.8 MEDIUM | Caddy 安全漏洞 |
| CVE-2024-21492 | 4.8 MEDIUM | caddy-security 安全漏洞 |
| CVE-2024-21499 | 4.3 MEDIUM | caddy-security 安全漏洞 |
| CVE-2024-22727 | Teltonika Networks TRB1 Series 安全漏洞 | |
| CVE-2024-25297 | Bludit 安全漏洞 | |
| CVE-2024-25298 | Yakamara Media Redaxo CMS 安全漏洞 | |
| CVE-2024-25468 | TOTOLINK X5000R 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2023-31728
No comments yet