01 Record

CVE-2023-47611

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could

HighPUBLISHEDCNA: Kaspersky

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.9% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2023-11-10 16:38Z2 YR AGO

Last updated

2024-08-02 21:09Z2 YR AGO

Reserved

2023-11-07

Assigning CNA

Kaspersky

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-269Improper Privilege ManagementClass

Data version

5.1

Document digest

084ca8810420c378c8a0671d30d4b730b1fef2eae8c35aa722a46113c3870635

05 Affected products

VendorProductVersionsPlatforms

Telit CinterionBGS5* to < 2.000 ARN 01.001.08—

Telit CinterionEHS5-E* to < 4.013 ARN 01.000.06—

Telit CinterionEHS5-US* to < 4.000—

Telit CinterionEHS5-US Rel.4* to < 4.013 ARN 01.000.06—

Telit CinterionEHS6* to < 2.000—

Telit CinterionEHS6 Rel.2* to < 2.000 ARN 00.000.20—

Telit CinterionEHS6 Rel.3* to < 3.001 ARN 00.000.49—

Telit CinterionEHS6 Rel.4* to < 4.013 ARN 01.000.06—

Telit CinterionEHS6-A Rel.4* to < 4.013 ARN 01.000.06—

Telit CinterionEHS8* to < 3.011 ARN 00.000.60—

Telit CinterionEHS8 Rel.4* to < 4.013 ARN 01.000.06—

Telit CinterionELS61-AUS* to < 1.000—

Telit CinterionELS61-AUS Rel.1* to < 1.004 ARN 00.003.01—

Telit CinterionELS61-AUS Rel.1 MR* to < 1.005 ARN 00.005.01—

Telit CinterionELS61-E* to < 1.000—

Telit CinterionELS61-E Rel.1* to < 1.000 ARN 00.030.01—

Telit CinterionELS61-E Rel.1 MR* to < 1.000 ARN 00.032.02—

Telit CinterionELS61-E Rel.2* to < 2.000 ARN 01.000.03—

Telit CinterionELS61-E2 Rel.1* to < 1.000 ARN 00.026.01—

Telit CinterionELS61-E2 Rel.1 MR* to < 1.000 ARN 00.032.02—

Telit CinterionELS61-US Rel.1 MR* to < 1.01 ARN 00.028.01—

Telit CinterionELS61-US Rel.2* to < 2.012 ARN 01.000.05—

Telit CinterionELS81-E* to < 4.000—

Telit CinterionELS81-E Rel.1* to < 4.000 ARN 01.000.05—

Telit CinterionELS81-E Rel.1.1* to < 5.001 ARN 01.000.04—

Telit CinterionELS81-US* to < 5.012—

Telit CinterionELS81-US Rel.1.1* to < 5.012 ARN 01.000.05—

Telit CinterionPDS5-E* to < 3.001—

Telit CinterionPDS5-E Rel.1* to < 3.001 ARN 00.000.32—

Telit CinterionPDS5-E Rel.4* to < 4.013 ARN 01.000.06—

Telit CinterionPDS5-USNot specified—

Telit CinterionPDS6Not specified—

Telit CinterionPDS8Not specified—

Telit CinterionPLS62-W* to < 2.01—

Telit CinterionPLS62-W Rel.1* to < 2.01 ARN 01.000.05—

06 References

ics-cert.kaspersky.comKLCERT-22-216: Telit Cinterion (Thales/Gemalto) modules. Improper Privilege Management vulnerabilityhttps://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-216-telit-cinterion-thales-gemalto-modules-improper-privilege-management-vulnerability/third-party-advisory

07 Remediation

Telit Cinterion has released firmware updates to fix the issue. Contact Telit Cinterion for assistance.