EHS5 vulnerabilities

2 known vulnerabilities in EHS5 from Telit Cinterion. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EHS5: Buffer Copy without Checking Size of Input

  CVE-2023-47610Nov 9, 2023Telit CinterionEPSS 2.2%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

• 7.1 High severity

  BGS5: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-47613Nov 9, 2023Telit Cinterion

  A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directo