Log in Start free

Vulnerability · Published Nov 9, 2023 · Assigned by Kaspersky

CVE-2023-47612

Medium 6.8

In plain English

A medium-severity security flaw in BGS5 from Telit Cinterion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.3%top 72.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a read/write access to any files and directories on the targeted system, including hidden files and directories.

Affected products (as reported)

VendorProductVersions
Telit Cinterion BGS5 see references
Telit Cinterion EHS5 see references
Telit Cinterion EHS6 see references
Telit Cinterion EHS8 see references
Telit Cinterion PDS5 see references
Telit Cinterion PDS6 see references
Telit Cinterion PDS8 see references
Telit Cinterion ELS61 see references
Telit Cinterion ELS81 see references
Telit Cinterion PLS62 see references

Weakness: CWE-552 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References