CVE-2023-47613 — Telit Cinterion / BGS5

Description (CNA)

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.

Affected (CNA)

Vendor / product	Versions
Telit Cinterion / BGS5	affected
Telit Cinterion / EHS5	affected
Telit Cinterion / EHS6	affected
Telit Cinterion / EHS8	affected
Telit Cinterion / PDS5	affected
Telit Cinterion / PDS6	affected
Telit Cinterion / PDS8	affected
Telit Cinterion / ELS61	affected
Telit Cinterion / ELS81	affected
Telit Cinterion / PLS62	affected

CWE

CWE-23

References

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal/

ADP enrichment

CVE

No English description supplied.

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal/

CISA-ADP

No English description supplied.

No references supplied.