<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rut240 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-31728: Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP s</title><link>https://patchthecve.com/cve/CVE-2023-31728.html</link><guid>https://patchthecve.com/cve/CVE-2023-31728.html</guid><pubDate>Wed, 17 Jun 2026 05:57:26 +0000</pubDate><description>HIGH 7.0: Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.</description></item><item><title>CVE-2023-32350: 
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) comman</title><link>https://patchthecve.com/cve/CVE-2023-32350.html</link><guid>https://patchthecve.com/cve/CVE-2023-32350.html</guid><pubDate>Wed, 17 Jun 2026 05:58:37 +0000</pubDate><description>HIGH 8.0: 
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a mal</description></item><item><title>CVE-2023-32349: 
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains p</title><link>https://patchthecve.com/cve/CVE-2023-32349.html</link><guid>https://patchthecve.com/cve/CVE-2023-32349.html</guid><pubDate>Wed, 17 Jun 2026 05:58:37 +0000</pubDate><description>HIGH 8.0: 
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuratio</description></item></channel></rss>