CVE Feed

    Dashboard / CVE / CVE-2023-47610

    CVE-2023-47610

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

    Published:Nov 9, 2023
    Last Modified:Feb 27, 2025
    EPS:Nov 9, 2023
    EPSS Score:0.03417
    CVSS Score:8.1

    Affected Products

    Vendor
    Telit
    Product
    Bgs5
    Vendor
    Telit
    Product
    Bgs5 Firmware
    Vendor
    Telit
    Product
    Ehs5
    Vendor
    Telit
    Product
    Ehs5 Firmware
    Vendor
    Telit
    Product
    Ehs6
    Vendor
    Telit
    Product
    Ehs6 Firmware
    Vendor
    Telit
    Product
    Ehs8
    Vendor
    Telit
    Product
    Ehs8 Firmware
    Vendor
    Telit
    Product
    Els61
    Vendor
    Telit
    Product
    Els61 Firmware
    Vendor
    Telit
    Product
    Els81
    Vendor
    Telit
    Product
    Els81 Firmware
    Vendor
    Telit
    Product
    Pds5
    Vendor
    Telit
    Product
    Pds5 Firmware
    Vendor
    Telit
    Product
    Pds6
    Vendor
    Telit
    Product
    Pds6 Firmware
    Vendor
    Telit
    Product
    Pds8
    Vendor
    Telit
    Product
    Pds8 Firmware
    Vendor
    Telit
    Product
    Pls62
    Vendor
    Telit
    Product
    Pls62 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-47611 (CVSS 7.8) — A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/…
    CVE-2023-47614 (CVSS 3.3) — A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion …
    CVE-2023-47615 (CVSS 3.3) — A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cin…
    CVE-2023-47616 (CVSS 2.4) — A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion …
    CVE-2023-47612 (CVSS 6.8) — A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, T…
    CVE-2023-47613 (CVSS 4.4) — A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Teli…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High