Teltonika RMS Security Concerns
Anyways, Teltonika is a pretty nice product and their RMS central hub makes using the product even easier by allowing you to connect to their device at all times.
But there's one huge caveat for me. They allow the downloading of openvpn configs even after you create them and those configs contain all the keys in the clear, no passphrase required.
If someone were to hack their RMS app, they could essentially connect directly to all the internal networks of their customers by downloading these openvpn configs.
Am I right in being paranoid about this ? I suggested they stop storing what's essentially their customers' passwords in the clear or at least add a passphrase but they claim their security is top notch and I shouldn't be worried: about a third party having direct access to our internal network while they store all the vpn keys in the clear.
Am I paranoid here ?