Vulnerability · Published Nov 10, 2023 · Assigned by Kaspersky
CVE-2023-47614
Low 3.3
In plain English
A low-severity information exposure in BGS5 from Telit Cinterion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.2%top 88.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Telit Cinterion | BGS5 | * – before 2.000 ARN 01.001.08 |
| Telit Cinterion | EHS5-E | * – before 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS5-US | * – before 4.000 |
| Telit Cinterion | EHS5-US Rel.4 | * – before 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS6 | * – before 2.000 |
| Telit Cinterion | EHS6 Rel.2 | * – before 2.000 ARN 00.000.20 |
| Telit Cinterion | EHS6 Rel.3 | * – before 3.001 ARN 00.000.49 |
| Telit Cinterion | EHS6 Rel.4 | * – before 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS6-A Rel.4 | * – before 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS8 | * – before 3.011 ARN 00.000.60 |
| Telit Cinterion | EHS8 Rel.4 | * – before 4.013 ARN 01.000.06 |
| Telit Cinterion | ELS61-AUS | * – before 1.000 |
| Telit Cinterion | ELS61-AUS Rel.1 | * – before 1.004 ARN 00.003.01 |
| Telit Cinterion | ELS61-AUS Rel.1 MR | * – before 1.005 ARN 00.005.01 |
| Telit Cinterion | ELS61-E | * – before 1.000 |
| Telit Cinterion | ELS61-E Rel.1 | * – before 1.000 ARN 00.030.01 |
| Telit Cinterion | ELS61-E Rel.1 MR | * – before 1.000 ARN 00.032.02 |
| Telit Cinterion | ELS61-E Rel.2 | * – before 2.000 ARN 01.000.03 |
| Telit Cinterion | ELS61-E Rel.2 | * – before 2.000 ARN 01.000.03 |
| Telit Cinterion | ELS61-E2 Rel.1 | * – before 1.000 ARN 00.026.01 |
| Telit Cinterion | ELS61-E2 Rel.1 MR | * – before 1.000 ARN 00.032.02 |
| Telit Cinterion | ELS61-US Rel.1 MR | * – before 1.01 ARN 00.028.01 |
| Telit Cinterion | ELS61-US Rel.2 | * – before 2.012 ARN 01.000.05 |
| Telit Cinterion | ELS81-E | * – before 4.000 |
| Telit Cinterion | ELS81-E Rel.1 | * – before 4.000 ARN 01.000.05 |
| Telit Cinterion | ELS81-E Rel.1.1 | * – before 5.001 ARN 01.000.04 |
| Telit Cinterion | ELS81-US | * – before 5.012 |
| Telit Cinterion | ELS81-US Rel.1.1 | * – before 5.012 ARN 01.000.05 |
| Telit Cinterion | PDS5-E | * – before 3.001 |
| Telit Cinterion | PDS5-E Rel.1 | * – before 3.001 ARN 00.000.32 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N