Lucene search

KasperskyCVELIST:CVE-2023-47615

HistoryNov 09, 2023 - 12:47 p.m.

CVE-2023-47615

2023-11-0912:47:43

CWE-526

Kaspersky

www.cve.org

cwe-526

exposure of sensitive information

environmental variables

telit cinterion bgs5

telit cinterion ehs5

telit cinterion pds5

telit cinterion els61

telit cinterion pls62

sensitive data access

local attack

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to get access to a sensitive data on the targeted system.

CNA Affected

[
  {
    "vendor": "Telit Cinterion",
    "product": "BGS5",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "EHS5",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "EHS6",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "EHS8",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "PDS5",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "PDS6",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "PDS8",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "ELS61",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "ELS81",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Telit Cinterion",
    "product": "PLS62",
    "defaultStatus": "affected"
  }
]

References

ics-cert.kaspersky.com/advisories/2023/11/09/klcert-22-212-telit-cinterion-thales-gemalto-modules-exposure-of-sensitive-information-through-environmental-variables/

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-47615