CVE-2023-47614

3.3 lowEPSS 0.2%

Low (3.3) in telit. EPSS 0.2% chance of exploitation in the next 30 days.

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2023-11-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

telit:bgs5_firmware
telit:ehs5_firmware
telit:ehs6_firmware
telit:ehs8_firmware
telit:els61_firmware
telit:els81_firmware
telit:pds5_firmware
telit:pds6_firmware
telit:pds8_firmware
telit:pls62_firmware

References

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-210-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability/
https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-210-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability/

Check your stack JSON