CVE-2023-47613

· MEDIUMModified

← All CVEs

CVSS v3.1

4.4

EPSS

0.24%

Published

Nov 9, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-23CWE-22

Affected Products (20)

telit · bgs5_firmwarevulnerable

telit · bgs5

telit · ehs5_firmwarevulnerable

telit · ehs5

telit · ehs6_firmwarevulnerable

telit · ehs6

telit · ehs8_firmwarevulnerable

telit · ehs8

telit · pds5_firmwarevulnerable

telit · pds5

telit · pds6_firmwarevulnerable

telit · pds6

telit · pds8_firmwarevulnerable

telit · pds8

telit · els61_firmwarevulnerable

telit · els61

telit · els81_firmwarevulnerable

telit · els81

telit · pls62_firmwarevulnerable

telit · pls62

References (2)

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal/

Third Party Advisory

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal/

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs