Telit Cinterion BGS5 Security Vulnerability

Telit Cinterion BGS5 is a mobile communication module from Telit Communications Telit. A security vulnerability exists in Telit Cinterion that stems from a disclosure of sensitive information to unauthorized participants vulnerability that could allow an attacker to access sensitive data on the...

Telit Cinterion BGS5 Security Vulnerability

Telit Cinterion BGS5 is a mobile communication module from Telit Communications Telit. A security vulnerability exists in Telit Cinterion that originates from allowing an attacker with physical access privileges to gain read and write access to any file and directory on the target system. Affecte...

PT-2023-9113 · Telit · Telit Cinterion Pls62 +3

Name of the Vulnerable Software and Affected Versions: Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 Description: A Relative Path Traversal issue exists that could allow a local, low privileged attacker to escape from virtual...

PT-2023-9109 · Telit · Telit Cinterion Els61/81 +3

Name of the Vulnerable Software and Affected Versions: Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 Description: A vulnerability exists in the Telit Cinterion software that is related to improper privilege management. This...

Directory traversal

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

CVE-2020-15858 describes a Directory Traversal flaw in Thales DIS (Cinterion) modules where the directory path access check of the internal flash file system can be bypassed. This enables proximate attackers to access sensitive data stored in the UFS, including application data and data used by J...

Researchers Warn of Flaw Affecting Millions of IoT Devices

Researchers are urging connected-device manufacturers to ensure they have applied patches addressing a flaw in a module used by millions of Internet-of-Things IoT devices. If exploited, researchers speculated that the flaw could allow attackers to knock out a city’s electricity or even overdose a...