Read the docs

Telit Cinterion

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Telit Cinterion records in CISA KEV

No Telit Cinterion vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Ehs5 Firmware · all components

TI-2023-25752 CVE-2023-47610 · GHSA-wv85-vm3v-v274

Buffer overflow in Telit Cinterion EHS5

Priority MEDIUM 46

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a spec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01694 Published 2023-11-09 No fix listed CWE-120
Priority LOW 33

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low pri…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2023-11-10 Fixed in 2.000 ARN 01.001.08, 4.013 ARN 01.000.06 +22 CWE-269
TI-2023-25755 CVE-2023-47613 · GHSA-36hj-g8jh-r4rq

Path traversal in Telit Cinterion BGS5

Priority LOW 31

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00236 Published 2023-11-09 No fix listed CWE-23
Priority LOW 24

A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00205 Published 2023-11-09 No fix listed CWE-526
Priority LOW 21

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00296 Published 2023-11-09 No fix listed CWE-200
Priority LOW 15

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2023-11-10 Fixed in 2.000 ARN 01.001.08, 4.013 ARN 01.000.06 +22 CWE-200
Open these records in search →