CVE-2023-47613

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Nov 9, 2023
Updated: Nov 16, 2023
CWE ID 23
CWE ID 22

Summary

CVE-2023-47613 is a newly disclosed vulnerability affecting several Telit cellular modules, including BGS5, EHS5/6/8, PDS5/6/8, ELS61/81, and PLS62. This issue is categorized as a CWE-23: Relative Path Traversal vulnerability. A local, low-privileged attacker can exploit this flaw to break free from virtual directories and gain read/write access to protected files on the targeted system. This vulnerability poses a significant risk, as it may enable attackers to bypass security restrictions and potentially compromise sensitive information. System administrators are strongly encouraged to install the available patches to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share