CVE-2020-15858: Improper Limitation of a Pathname to a Restricted Directory

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

PT-2020-14670

Name of the Vulnerable Software and Affected Versions Thales DIS formerly Gemalto, formerly Cinterion BGS5 versions up to and including SW RN 02.000 / ARN 01.001.06 Thales DIS formerly Gemalto, formerly Cinterion EHSx versions up to and including SW RN 04.003 / ARN 01.000.04 Thales DIS formerly...