high8.1
CVE-2023-47610
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to ex…
Impact
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telit | Bgs5 Firmware | All versions |
| Telit | Ehs5 Firmware | All versions |
| Telit | Ehs6 Firmware | All versions |
| Telit | Ehs8 Firmware | All versions |
| Telit | Pds5 Firmware | All versions |
| Telit | Pds6 Firmware | All versions |
| Telit | Pds8 Firmware | All versions |
| Telit | Els61 Firmware | All versions |
| Telit | Els81 Firmware | All versions |
| Telit | Pls62 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/
- https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/