CVE-2023-47612

Medium

Description

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a read/write access to any files and directories on the targeted system, including hidden files and directories.

SeverityMedium
CVSS6.8
Exploit probability—
ProductTelit Bgs5 Firmware
PublishedNov 9, 2023
First seenNov 9, 2023
Weakness typeCWE-552CWE-552

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
telit bgs5_firmwareNo range specified—
telit ehs5_firmwareNo range specified—
telit ehs6_firmwareNo range specified—
telit ehs8_firmwareNo range specified—
telit pds5_firmwareNo range specified—
telit pds6_firmwareNo range specified—
telit pds8_firmwareNo range specified—
telit els61_firmwareNo range specified—
telit els81_firmwareNo range specified—
telit pls62_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.