What is the status of SSH on Teltonika RUT-240 and RUT-241 routers

[jwgorman]

https://security-tracker.debian.org/tracker/CVE-2024-6387

shows that an OpenSSH exploit has been reported - can you advise what the status is of linux based devices and anything we should be reviewing in terms of firmware updates.

[DziugasS]

Hello,

Thank you for reporting this.

We can assure you that the Threat CVE-2024-6387 does not apply to our SSH system, as we use dropbear implementation, and not OpenSSH. In addition, our RnD team is already aware of this issue and is assured that this threat does not apply to our devices.

Let me know if you have any further questions,
DziugasS

[jwgorman]

Thanks DziugasS good to know!