VDB
BDU%3A2024-03894
BDU%3A2024-03894
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость микропрограммного обеспечения модемов Telit Cinterion, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии в системе
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Telit Cinterion | PDS5-E Rel.1 | * |
| Telit Cinterion | PDS8 | |
| Telit Cinterion | ELS61-E2 Rel.1 MR | * |
| Telit Cinterion | ELS61-AUS Rel.1 | * |
| Telit Cinterion | EHS8 | * |
| Telit Cinterion | EHS6-A Rel.4 | * |
| Telit Cinterion, НПП «ИТЭЛМА» | PDS6, PDS8, BGS5, EHS5, EHS6 Rel.2, EHS6 Rel.3, EHS6 Rel.4, EHS8, EHS8 Rel.4, ELS61-AUS REL.1, ELS61-AUS Rel.1 MR, ELS61-E REL.1, ELS61-E Rel.1 MR, ELS61-E Rel.2, ELS61-E2 REL.1, ELS61-E2 Rel.1 MR, ELS61-US Rel.1 MR, ELS61-US REL.2, ELS81-E Rel.1, ELS81-E Rel.1.1, ELS81-US Rel.1.1, PDS5-E Rel.1, PDS5-E Rel.4, PLS62-W, PLS62-W Rel.1, БЭГ ИТЭЛМА 1824.3879600, БЭГ ИТЭЛМА 8450020004, БЭГ ИТЭЛМА 8450031410, БЭГ ИТЭЛМА 8450008475, БЭГ ИТЭЛМА 8450033434, БЭГ ИТЭЛМА 8450103571, БЭГ ИТЭЛМА 8450103773, БЭГ ИТЭЛМА 8450042687, БЭГ ИТЭЛМА 111.3879000, БЭГ ИТЭЛМА 18.3879600-ХХ | |
| Telit Cinterion | PLS62-W | * |
| Telit Cinterion | ELS81-E Rel.1.1 | * |
| Telit Cinterion | BGS5 | * |
| Telit Cinterion | EHS5-US | * |
| Telit Cinterion | EHS6 Rel.4 | * |
| Telit Cinterion | ELS81-US | * |
| Telit Cinterion | PDS5-E Rel.4 | * |
| Telit Cinterion | EHS8 Rel.4 | * |
| Telit Cinterion | ELS61-US Rel.2 | * |
| Telit Cinterion | ELS61-E2 Rel.1 | * |
| Telit Cinterion | PDS6 | |
| Telit Cinterion | ELS81-US Rel.1.1 | * |
| Telit Cinterion | ELS61-AUS Rel.1 MR | * |
…and 16 more
Timeline
- Nov 10, 2023 CVE Published
- May 13, 2024 PoC Published
- May 14, 2024 PoC Published
- Jun 13, 2024 PoC Published
- Aug 19, 2024 CVE Updated
- Apr 10, 2025 PoC Published
References
- https://www.cve.org/CVERecord?id=CVE-2023-47611 url
- KLCERT-22-216: Telit Cinterion (Thales/Gemalto) modules. Improper Privilege Management vulnerability third-party-advisory
- https://ics-cert.kaspersky.ru/advisories/2023/11/08/klcert-22-216-telit-cinterion-thales-gemalto-modules-improper-privilege-management-vulnerability url
- https://ics-cert.kaspersky.ru/advisories/2024/08/15/klcert-24-064-beg-npp-itelma-uyazvimost-nekorrektnogo-upravleniya-privilegiyami advisory