CVE-2023-47610

Published: Nov 9, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

Affected (10)

Products: Telit: Bgs5 Firmware, Ehs5 Firmware, Ehs6 Firmware, Ehs8 Firmware, Pds5 Firmware, Pds6 Firmware, Pds8 Firmware, Els61 Firmware, Els81 Firmware, Pls62 Firmware

10 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Bgs5 Firmware	All versions

Running on/with	Platform Versions
Telit Bgs5	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Ehs5 Firmware	All versions

Running on/with	Platform Versions
Telit Ehs5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Ehs6 Firmware	All versions

Running on/with	Platform Versions
Telit Ehs6	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Ehs8 Firmware	All versions

Running on/with	Platform Versions
Telit Ehs8	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Pds5 Firmware	All versions

Running on/with	Platform Versions
Telit Pds5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Pds6 Firmware	All versions

Running on/with	Platform Versions
Telit Pds6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Pds8 Firmware	All versions

Running on/with	Platform Versions
Telit Pds8	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Els61 Firmware	All versions

Running on/with	Platform Versions
Telit Els61	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Els81 Firmware	All versions

Running on/with	Platform Versions
Telit Els81	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telit Pls62 Firmware	All versions

Running on/with	Platform Versions
Telit Pls62	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/

Source: vulnerability@kaspersky.com

Third Party Advisory

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.