Vulnerabilities

CVSS

8.0 High

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

64.0

Published

2023-05-22

Status

Published

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload.

Weaknesses

CWE-78

Coverage 1

threat-intel

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Polish power plant operators suffered a significant cyberattack that led to the shutdown of a steam turbine and process-water treatment system. The attack exploited a private cellular network used by the grid operator to…

The Hacker News · Aug 11, 2026 High

CVE-2023-32349CVE-2023-32350PLprivate apnindustrial control systemscyberattack

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-23-131-08