Design/Logic Flaw

2023-11-0917:15:00

PRIOn knowledge base

www.prio-n.com

cwe-120 buffer copy

input size

telit cinterion

remote execution

sms

nvd

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.6%

JSON

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

References

ics-cert.kaspersky.com/advisories/2023/11/08/klcert-23-018-telit-cinterion-thales-gemalto-modules-buffer-copy-without-checking-size-of-input-vulnerability/