CVE-2023-47613
MEDIUMTelit Cinterion BGS5 EHS5/6/8 PDS5/6/8 ELS61/81 PLS62 - Path Traversal
Title source: llmDescription
A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.
References (1)
Core 1
Core References
Third Party Advisory third-party-advisory
https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal/
Scores
CVSS v3
4.4
EPSS
0.0024
EPSS Percentile
14.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
CWE-23
Status
published
Products (10)
telit/bgs5_firmware
telit/ehs5_firmware
telit/ehs6_firmware
telit/ehs8_firmware
telit/els61_firmware
telit/els81_firmware
telit/pds5_firmware
telit/pds6_firmware
telit/pds8_firmware
telit/pls62_firmware
Published
Nov 09, 2023
Tracked Since
Feb 18, 2026