CVE-2023-47611

Published Nov 10, 2023 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.

Remediation

Vendor Solution

Telit Cinterion has released firmware updates to fix the issue. Contact Telit Cinterion for assistance.


Vendor Workaround

Enforce application signature verification to prohibit the installation of untrusted MIDlets on the device.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-51722 A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
History

No history.