First published: Thu Nov 09 2023(Updated: )
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to get access to a sensitive data on the targeted system.
Credit: vulnerability@kaspersky.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Telit BGS5 | ||
Telit BGS5 | ||
All of | ||
Telit Ehs5 Firmware | ||
Telit Ehs5 Firmware | ||
All of | ||
Telit EHS6 Firmware | ||
Telit EHS6 Firmware | ||
All of | ||
Telit Ehs8 | ||
Telit Ehs8 Firmware | ||
All of | ||
Telit Pds5 Firmware | ||
Telit Pds5 Firmware | ||
All of | ||
Telit PDS6 | ||
Telit PDS6 | ||
All of | ||
Telit PDS8 | ||
Telit PDS8 | ||
All of | ||
Telit Els61 | ||
Telit Els61 Firmware | ||
All of | ||
Telit Els81 | ||
Telit Els81 Firmware | ||
All of | ||
Telit Pls62 | ||
Telit Pls62 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-47616.
The severity level is medium with a CVSS score of 4.6.
The vulnerability allows an unauthorized actor with physical access to the target system to access sensitive information.
No, Telit Cinterion EHS5/6/8 is not affected by this vulnerability.
More information about CVE-2023-47616 can be found at https://ics-cert.kaspersky.com/advisories/2023/11/09/klcert-22-193-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-to-an-unauthorized-actor/.