Read the docs
TI-2023-25753 Aliases CVE-2023-47611GHSA-wg8w-6qgx-cvp8

Improper privilege management in Telit Cinterion BGS5

Priority LOW 33CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.

Why it matters now

EPSS 0.00209 11th percentileScored 2026-11-07
Fix Fixed BGS5 (Telit Cinterion): 2.000 ARN 01.001.08EHS5-E (Telit Cinterion): 4.013 ARN 01.000.06+30 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Telit CinterionBGS5before 2.000 ARN 01.001.082.000 ARN 01.001.08Patch availableCNA
Telit CinterionEHS5-Ebefore 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionEHS5-USbefore 4.0004.000Patch availableCNA
Telit CinterionEHS5-US Rel.4before 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionEHS6before 2.0002.000Patch availableCNA
Telit CinterionEHS6 Rel.2before 2.000 ARN 00.000.202.000 ARN 00.000.20Patch availableCNA
Telit CinterionEHS6 Rel.3before 3.001 ARN 00.000.493.001 ARN 00.000.49Patch availableCNA
Telit CinterionEHS6 Rel.4before 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionEHS6-A Rel.4before 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionEHS8before 3.011 ARN 00.000.603.011 ARN 00.000.60Patch availableCNA
Telit CinterionEHS8 Rel.4before 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionELS61-AUSbefore 1.0001.000Patch availableCNA
Telit CinterionELS61-AUS Rel.1before 1.004 ARN 00.003.011.004 ARN 00.003.01Patch availableCNA
Telit CinterionELS61-AUS Rel.1 MRbefore 1.005 ARN 00.005.011.005 ARN 00.005.01Patch availableCNA
Telit CinterionELS61-Ebefore 1.0001.000Patch availableCNA
Telit CinterionELS61-E Rel.1before 1.000 ARN 00.030.011.000 ARN 00.030.01Patch availableCNA
Telit CinterionELS61-E Rel.1 MRbefore 1.000 ARN 00.032.021.000 ARN 00.032.02Patch availableCNA
Telit CinterionELS61-E Rel.2before 2.000 ARN 01.000.032.000 ARN 01.000.03Patch availableCNA
Telit CinterionELS61-E Rel.2before 2.000 ARN 01.000.032.000 ARN 01.000.03Patch availableCNA
Telit CinterionELS61-E2 Rel.1before 1.000 ARN 00.026.011.000 ARN 00.026.01Patch availableCNA
Telit CinterionELS61-E2 Rel.1 MRbefore 1.000 ARN 00.032.021.000 ARN 00.032.02Patch availableCNA
Telit CinterionELS61-US Rel.1 MRbefore 1.01 ARN 00.028.011.01 ARN 00.028.01Patch availableCNA
Telit CinterionELS61-US Rel.2before 2.012 ARN 01.000.052.012 ARN 01.000.05Patch availableCNA
Telit CinterionELS81-Ebefore 4.0004.000Patch availableCNA
Telit CinterionELS81-E Rel.1before 4.000 ARN 01.000.054.000 ARN 01.000.05Patch availableCNA
Telit CinterionELS81-E Rel.1.1before 5.001 ARN 01.000.045.001 ARN 01.000.04Patch availableCNA
Telit CinterionELS81-USbefore 5.0125.012Patch availableCNA
Telit CinterionELS81-US Rel.1.1before 5.012 ARN 01.000.055.012 ARN 01.000.05Patch availableCNA
Telit CinterionPDS5-Ebefore 3.0013.001Patch availableCNA
Telit CinterionPDS5-E Rel.1before 3.001 ARN 00.000.323.001 ARN 00.000.32Patch availableCNA
Telit CinterionPDS5-E Rel.4before 4.013 ARN 01.000.064.013 ARN 01.000.06Patch availableCNA
Telit CinterionPDS5-US——No fix listedCNA
Telit CinterionPDS6——No fix listedCNA
Telit CinterionPDS8——No fix listedCNA
Telit CinterionPLS62-Wbefore 2.012.01Patch availableCNA
Telit CinterionPLS62-W Rel.1before 2.01 ARN 01.000.052.01 ARN 01.000.05Patch availableCNA
  • BGS5 VendorTelit Cinterion Affected before 2.000 ARN 01.001.08 Fixed in 2.000 ARN 01.001.08 Patch available CNA
  • EHS5-E VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • EHS5-US VendorTelit Cinterion Affected before 4.000 Fixed in 4.000 Patch available CNA
  • EHS5-US Rel.4 VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • EHS6 VendorTelit Cinterion Affected before 2.000 Fixed in 2.000 Patch available CNA
  • EHS6 Rel.2 VendorTelit Cinterion Affected before 2.000 ARN 00.000.20 Fixed in 2.000 ARN 00.000.20 Patch available CNA
  • EHS6 Rel.3 VendorTelit Cinterion Affected before 3.001 ARN 00.000.49 Fixed in 3.001 ARN 00.000.49 Patch available CNA
  • EHS6 Rel.4 VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • EHS6-A Rel.4 VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • EHS8 VendorTelit Cinterion Affected before 3.011 ARN 00.000.60 Fixed in 3.011 ARN 00.000.60 Patch available CNA
  • EHS8 Rel.4 VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • ELS61-AUS VendorTelit Cinterion Affected before 1.000 Fixed in 1.000 Patch available CNA
  • ELS61-AUS Rel.1 VendorTelit Cinterion Affected before 1.004 ARN 00.003.01 Fixed in 1.004 ARN 00.003.01 Patch available CNA
  • ELS61-AUS Rel.1 MR VendorTelit Cinterion Affected before 1.005 ARN 00.005.01 Fixed in 1.005 ARN 00.005.01 Patch available CNA
  • ELS61-E VendorTelit Cinterion Affected before 1.000 Fixed in 1.000 Patch available CNA
  • ELS61-E Rel.1 VendorTelit Cinterion Affected before 1.000 ARN 00.030.01 Fixed in 1.000 ARN 00.030.01 Patch available CNA
  • ELS61-E Rel.1 MR VendorTelit Cinterion Affected before 1.000 ARN 00.032.02 Fixed in 1.000 ARN 00.032.02 Patch available CNA
  • ELS61-E Rel.2 VendorTelit Cinterion Affected before 2.000 ARN 01.000.03 Fixed in 2.000 ARN 01.000.03 Patch available CNA
  • ELS61-E Rel.2 VendorTelit Cinterion Affected before 2.000 ARN 01.000.03 Fixed in 2.000 ARN 01.000.03 Patch available CNA
  • ELS61-E2 Rel.1 VendorTelit Cinterion Affected before 1.000 ARN 00.026.01 Fixed in 1.000 ARN 00.026.01 Patch available CNA
  • ELS61-E2 Rel.1 MR VendorTelit Cinterion Affected before 1.000 ARN 00.032.02 Fixed in 1.000 ARN 00.032.02 Patch available CNA
  • ELS61-US Rel.1 MR VendorTelit Cinterion Affected before 1.01 ARN 00.028.01 Fixed in 1.01 ARN 00.028.01 Patch available CNA
  • ELS61-US Rel.2 VendorTelit Cinterion Affected before 2.012 ARN 01.000.05 Fixed in 2.012 ARN 01.000.05 Patch available CNA
  • ELS81-E VendorTelit Cinterion Affected before 4.000 Fixed in 4.000 Patch available CNA
  • ELS81-E Rel.1 VendorTelit Cinterion Affected before 4.000 ARN 01.000.05 Fixed in 4.000 ARN 01.000.05 Patch available CNA
  • ELS81-E Rel.1.1 VendorTelit Cinterion Affected before 5.001 ARN 01.000.04 Fixed in 5.001 ARN 01.000.04 Patch available CNA
  • ELS81-US VendorTelit Cinterion Affected before 5.012 Fixed in 5.012 Patch available CNA
  • ELS81-US Rel.1.1 VendorTelit Cinterion Affected before 5.012 ARN 01.000.05 Fixed in 5.012 ARN 01.000.05 Patch available CNA
  • PDS5-E VendorTelit Cinterion Affected before 3.001 Fixed in 3.001 Patch available CNA
  • PDS5-E Rel.1 VendorTelit Cinterion Affected before 3.001 ARN 00.000.32 Fixed in 3.001 ARN 00.000.32 Patch available CNA
  • PDS5-E Rel.4 VendorTelit Cinterion Affected before 4.013 ARN 01.000.06 Fixed in 4.013 ARN 01.000.06 Patch available CNA
  • PDS5-US VendorTelit Cinterion Affected — Fixed in — No fix listed CNA
  • PDS6 VendorTelit Cinterion Affected — Fixed in — No fix listed CNA
  • PDS8 VendorTelit Cinterion Affected — Fixed in — No fix listed CNA
  • PLS62-W VendorTelit Cinterion Affected before 2.01 Fixed in 2.01 Patch available CNA
  • PLS62-W Rel.1 VendorTelit Cinterion Affected before 2.01 ARN 01.000.05 Fixed in 2.01 ARN 01.000.05 Patch available CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:telit:bgs5_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:bgs5:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:ehs5_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:ehs5:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:ehs6_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:ehs6:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:ehs8_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:ehs8:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:pds5_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:pds5:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
  • cpe:2.3:o:telit:bgs5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:bgs5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:ehs5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:ehs5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:ehs6_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:ehs6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:ehs8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:ehs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:pds5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:pds5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:telit:pds6_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:pds6:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:pds8_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:pds8:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:els61_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:els61:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:els81_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:els81:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
cpe:2.3:o:telit:pls62_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTelit Cinterion
cpe:2.3:h:telit:pls62:-:*:*:*:*:*:*:*not specified by NVDRunning onTelit Cinterion
  • cpe:2.3:o:telit:pds6_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:pds6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:pds8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:pds8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:els61_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:els61:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:els81_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:els81:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion
  • cpe:2.3:o:telit:pls62_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Telit Cinterion
  • cpe:2.3:h:telit:pls62:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Telit Cinterion

Remediation

  • Fix · CNA BGS5 (Telit Cinterion) Fixed in 2.000 ARN 01.001.08
  • Fix · CNA EHS5-E (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA EHS5-US (Telit Cinterion) Fixed in 4.000
  • Fix · CNA EHS5-US Rel.4 (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA EHS6 (Telit Cinterion) Fixed in 2.000
  • Fix · CNA EHS6 Rel.2 (Telit Cinterion) Fixed in 2.000 ARN 00.000.20
  • Fix · CNA EHS6 Rel.3 (Telit Cinterion) Fixed in 3.001 ARN 00.000.49
  • Fix · CNA EHS6 Rel.4 (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA EHS6-A Rel.4 (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA EHS8 (Telit Cinterion) Fixed in 3.011 ARN 00.000.60
  • Fix · CNA EHS8 Rel.4 (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA ELS61-AUS (Telit Cinterion) Fixed in 1.000
  • Fix · CNA ELS61-AUS Rel.1 (Telit Cinterion) Fixed in 1.004 ARN 00.003.01
  • Fix · CNA ELS61-AUS Rel.1 MR (Telit Cinterion) Fixed in 1.005 ARN 00.005.01
  • Fix · CNA ELS61-E (Telit Cinterion) Fixed in 1.000
  • Fix · CNA ELS61-E Rel.1 (Telit Cinterion) Fixed in 1.000 ARN 00.030.01
  • Fix · CNA ELS61-E Rel.1 MR (Telit Cinterion) Fixed in 1.000 ARN 00.032.02
  • Fix · CNA ELS61-E Rel.2 (Telit Cinterion) Fixed in 2.000 ARN 01.000.03
  • Fix · CNA ELS61-E Rel.2 (Telit Cinterion) Fixed in 2.000 ARN 01.000.03
  • Fix · CNA ELS61-E2 Rel.1 (Telit Cinterion) Fixed in 1.000 ARN 00.026.01
  • Fix · CNA ELS61-E2 Rel.1 MR (Telit Cinterion) Fixed in 1.000 ARN 00.032.02
  • Fix · CNA ELS61-US Rel.1 MR (Telit Cinterion) Fixed in 1.01 ARN 00.028.01
  • Fix · CNA ELS61-US Rel.2 (Telit Cinterion) Fixed in 2.012 ARN 01.000.05
  • Fix · CNA ELS81-E (Telit Cinterion) Fixed in 4.000
  • Fix · CNA ELS81-E Rel.1 (Telit Cinterion) Fixed in 4.000 ARN 01.000.05
  • Fix · CNA ELS81-E Rel.1.1 (Telit Cinterion) Fixed in 5.001 ARN 01.000.04
  • Fix · CNA ELS81-US (Telit Cinterion) Fixed in 5.012
  • Fix · CNA ELS81-US Rel.1.1 (Telit Cinterion) Fixed in 5.012 ARN 01.000.05
  • Fix · CNA PDS5-E (Telit Cinterion) Fixed in 3.001
  • Fix · CNA PDS5-E Rel.1 (Telit Cinterion) Fixed in 3.001 ARN 00.000.32
  • Fix · CNA PDS5-E Rel.4 (Telit Cinterion) Fixed in 4.013 ARN 01.000.06
  • Fix · CNA PLS62-W (Telit Cinterion) Fixed in 2.01
  • Fix · CNA PLS62-W Rel.1 (Telit Cinterion) Fixed in 2.01 ARN 01.000.05

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Telit Cinterion BGS5, EHS5-E and 30 more products 1.000, 1.000 ARN 00.026.01 and 22 more versions

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2023-25756 Information disclosure in Telit Cinterion BGS5Priority LOW 15
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-47611
  2. 2026-10-03 Alias added: GHSA-wg8w-6qgx-cvp8

References

Advisory 1

  • TI-2023-25752 Buffer overflow in Telit Cinterion EHS5 CVSS 3.1CRITICAL 9.8
  • TI-2023-25754 A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in… CVSS 3.1MEDIUM 6.8
  • TI-2023-25755 Path traversal in Telit Cinterion BGS5 CVSS 3.1HIGH 7.1
  • TI-2023-25757 A CWE-526: Exposure of Sensitive Information Through Environmental Variables… CVSS 3.1MEDIUM 5.5
  • TI-2023-25758 Information disclosure in Telit Cinterion BGS5 CVSS 3.1MEDIUM 4.6
  • TI-2023-25756 Information disclosure in Telit Cinterion BGS5 CVSS 3.1LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences