Multiple vulnerabilities in Telit Cinterion modules

Published: 2023-11-09

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2023-47611 CVE-2023-47614
CWE-ID	CWE-269 CWE-200
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	PDS6 Hardware solutions / Firmware PDS8 Hardware solutions / Firmware PLS62-W Hardware solutions / Firmware BGS5 Hardware solutions / Firmware EHS5 Hardware solutions / Firmware EHS6 Rel.2 Hardware solutions / Firmware EHS6 Rel.3 Hardware solutions / Firmware EHS6 Rel.4 Hardware solutions / Firmware EHS8 Hardware solutions / Firmware EHS8 Rel.4 Hardware solutions / Firmware ELS61-AUS REL.1 Hardware solutions / Firmware ELS61-AUS Rel.1 MR Hardware solutions / Firmware ELS61-E REL.1 Hardware solutions / Firmware ELS61-E Rel.1 MR Hardware solutions / Firmware ELS61-E Rel.2 Hardware solutions / Firmware ELS61-E2 REL.1 Hardware solutions / Firmware ELS61-E2 Rel.1 MR Hardware solutions / Firmware ELS61-US Rel.1 MR Hardware solutions / Firmware ELS61-US REL.2 Hardware solutions / Firmware ELS81-E Rel.1 Hardware solutions / Firmware ELS81-E Rel.1.1 Hardware solutions / Firmware ELS81-US Rel.1.1 Hardware solutions / Firmware PDS5-E Rel.1 Hardware solutions / Firmware PDS5-E Rel.4 Hardware solutions / Firmware PLS62-W Rel.1 Hardware solutions / Firmware
Vendor	Telit

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Improper Privilege Management

EUVDB-ID: #VU82931

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-47611

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to improper privilege management. A local user can escalate privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

PDS6: All versions

PDS8: All versions

PLS62-W: All versions

BGS5: before ARN 01.001.08

EHS5: before ARN 01.000.06

EHS6 Rel.2: before ARN 00.000.20

EHS6 Rel.3: before ARN 00.000.49

EHS6 Rel.4: before ARN 01.000.06

EHS8: before ARN 00.000.60

EHS8 Rel.4: before ARN 01.000.06

ELS61-AUS REL.1: before ARN 00.006.01

ELS61-AUS Rel.1 MR: before ARN 00.005.01

ELS61-E REL.1: before ARN 00.030.01

ELS61-E Rel.1 MR: before ARN 00.032.02

ELS61-E Rel.2: before ARN 01.000.03

ELS61-E2 REL.1: before ARN 00.026.01

ELS61-E2 Rel.1 MR: before ARN 00.032.02

ELS61-US Rel.1 MR: before ARN 00.028.01

ELS61-US REL.2: before ARN 01.000.05

ELS81-E Rel.1: before ARN 01.000.05

ELS81-E Rel.1.1: before ARN 01.000.04

ELS81-US Rel.1.1: before ARN 01.000.05

PDS5-E Rel.1: before ARN 00.000.32

PDS5-E Rel.4: before ARN 01.000.06

PLS62-W Rel.1: before ARN 01.000.06

CPE2.3

External links

https://ics-cert.kaspersky.com/advisories/2023/11/08/klcert-22-216-telit-cinterion-thales-gemalto-modules-improper-privilege-management-vulnerability/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Information disclosure

EUVDB-ID: #VU82932