CVE-2023-47614 
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Telit Cinterion
product: BGS5
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-E
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-US
default_status: unaffected
vendor: Telit Cinterion
product: EHS5-US Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS6
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.3
default_status: unaffected
vendor: Telit Cinterion
product: EHS6 Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS6-A Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: EHS8
default_status: unaffected
vendor: Telit Cinterion
product: EHS8 Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-AUS Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E2 Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-E2 Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-US Rel.1 MR
default_status: unaffected
vendor: Telit Cinterion
product: ELS61-US Rel.2
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-E Rel.1.1
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-US
default_status: unaffected
vendor: Telit Cinterion
product: ELS81-US Rel.1.1
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E Rel.1
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-E Rel.4
default_status: unaffected
vendor: Telit Cinterion
product: PDS5-US
default_status: affected
vendor: Telit Cinterion
product: PDS6
default_status: affected
vendor: Telit Cinterion
product: PDS8
default_status: affected
vendor: Telit Cinterion
product: PLS62-W
default_status: unaffected
vendor: Telit Cinterion
product: PLS62-W Rel.1
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Credits: lang: en
value: Alexander Kozlov from Kaspersky
lang: en
value: Sergey Anufrienko from Kaspersky
Published: 2023-11-10T15:50:24.884Z