CVE-2023-47611 
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Telit Cinterion
product: BGS5
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-E
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-US
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-US Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS6
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.3
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS6-A Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS8
default_status: unaffected
vendor: Telit Cinterion
product: EHS8 Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E2 Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E2 Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-US Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-US Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E Rel.1.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-US
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-US Rel.1.1
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-US
default_status: affected
vendor: Telit Cinterion
product: PDS6
default_status: affected
vendor: Telit Cinterion
product: PDS8
default_status: affected
vendor: Telit Cinterion
product: PLS62-W
default_status: unaffected
vendor: Telit Cinterion
product: PLS62-W Rel.1
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Credits: lang: en
value: Alexander Kozlov from Kaspersky
lang: en
value: Sergey Anufrienko from Kaspersky
Published: 2023-11-10T16:38:54.668Z