CVE-2023-47610 — Telit Cinterion / EHS5

Description (CNA)

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

Affected (CNA)

Vendor / product	Versions
Telit Cinterion / EHS5	affected
Telit Cinterion / EHS6	affected
Telit Cinterion / EHS8	affected

CWE

CWE-120

References

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/

ADP enrichment

CVE

No English description supplied.

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/

CISA-ADP

No English description supplied.

No references supplied.