CVE-2023-47613

Medium

Description

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.

SeverityMedium
CVSS4.4
Exploit probability—
ProductTelit Bgs5 Firmware
PublishedNov 9, 2023
First seenNov 9, 2023
Weakness typeCWE-23CWE-23

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
telit bgs5_firmwareNo range specified—
telit ehs5_firmwareNo range specified—
telit ehs6_firmwareNo range specified—
telit ehs8_firmwareNo range specified—
telit pds5_firmwareNo range specified—
telit pds6_firmwareNo range specified—
telit pds8_firmwareNo range specified—
telit els61_firmwareNo range specified—
telit els81_firmwareNo range specified—
telit pls62_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.