CVE-2023-47610

9.8 criticalEPSS 1.7%

Critical (9.8) in telit. EPSS 1.7% chance of exploitation in the next 30 days.

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2023-11-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

telit:bgs5_firmware
telit:ehs5_firmware
telit:ehs6_firmware
telit:ehs8_firmware
telit:els61_firmware
telit:els81_firmware
telit:pds5_firmware
telit:pds6_firmware
telit:pds8_firmware
telit:pls62_firmware

References

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/
https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/

Check your stack JSON