low3.3
CVE-2023-47615
A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cint…
Impact
A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to get access to a sensitive data on the targeted system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telit | Bgs5 Firmware | All versions |
| Telit | Ehs5 Firmware | All versions |
| Telit | Ehs6 Firmware | All versions |
| Telit | Ehs8 Firmware | All versions |
| Telit | Pds5 Firmware | All versions |
| Telit | Pds6 Firmware | All versions |
| Telit | Pds8 Firmware | All versions |
| Telit | Els61 Firmware | All versions |
| Telit | Els81 Firmware | All versions |
| Telit | Pls62 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://ics-cert.kaspersky.com/advisories/2023/11/09/klcert-22-212-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-through-environmental-variables/
- https://ics-cert.kaspersky.com/advisories/2023/11/09/klcert-22-212-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-through-environmental-variables/