Vulnerability · Published Nov 9, 2023 · Assigned by Kaspersky
CVE-2023-47613
Medium 4.4
In plain English
A medium-severity security flaw in BGS5 from Telit Cinterion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.2%top 85.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Telit Cinterion | BGS5 | see references |
| Telit Cinterion | EHS5 | see references |
| Telit Cinterion | EHS6 | see references |
| Telit Cinterion | EHS8 | see references |
| Telit Cinterion | PDS5 | see references |
| Telit Cinterion | PDS6 | see references |
| Telit Cinterion | PDS8 | see references |
| Telit Cinterion | ELS61 | see references |
| Telit Cinterion | ELS81 | see references |
| Telit Cinterion | PLS62 | see references |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
References
- KLCERT-22-211: Telit Cinterion (Thales/Gemalto) modules. Relative Path Traversal third-party-advisory