Improper Privilege Management in Telit products - CVE-2023-47611
Published: November 9, 2023
Vulnerability identifier: #VU82931
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-47611
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges.
The vulnerability exists due to improper privilege management. A local user can escalate privileges.
Affected software
PDS6
PDS8
PLS62-W
EHS6 Rel.2
PDS5-E Rel.1
EHS6 Rel.3
EHS8
ELS61-AUS Rel.1 MR
ELS61-AUS REL.1
ELS61-E2 REL.1
ELS61-US Rel.1 MR
ELS61-E REL.1
ELS61-E2 Rel.1 MR
ELS61-E Rel.1 MR
ELS61-E Rel.2
ELS81-E Rel.1.1
ELS81-E Rel.1
ELS61-US REL.2
ELS81-US Rel.1.1
EHS8 Rel.4
EHS6 Rel.4
PDS5-E Rel.4
PLS62-W Rel.1
EHS5
BGS5
PDS8
PLS62-W
EHS6 Rel.2
PDS5-E Rel.1
EHS6 Rel.3
EHS8
ELS61-AUS Rel.1 MR
ELS61-AUS REL.1
ELS61-E2 REL.1
ELS61-US Rel.1 MR
ELS61-E REL.1
ELS61-E2 Rel.1 MR
ELS61-E Rel.1 MR
ELS61-E Rel.2
ELS81-E Rel.1.1
ELS81-E Rel.1
ELS61-US REL.2
ELS81-US Rel.1.1
EHS8 Rel.4
EHS6 Rel.4
PDS5-E Rel.4
PLS62-W Rel.1
EHS5
BGS5
How to mitigate CVE-2023-47611
Install updates from vendor's website.
EHS6 Rel.2 - addressed in versions ARN 00.000.20, RN 2.000
PDS5-E Rel.1 - addressed in versions ARN 00.000.32, RN 3.001
EHS6 Rel.3 - addressed in versions ARN 00.000.49, RN 3.001
EHS8 - addressed in versions ARN 00.000.60, 3.011
ELS61-AUS Rel.1 MR - addressed in versions ARN 00.005.01, RN 1.005
ELS61-AUS REL.1 - addressed in versions ARN 00.006.01, RN 1.004
ELS61-E2 REL.1 - addressed in versions ARN 00.026.01, RN 1.000
ELS61-US Rel.1 MR - addressed in versions ARN 00.028.01, RN 1.01
ELS61-E REL.1 - addressed in versions ARN 00.030.01, RN 1.000
ELS61-E2 Rel.1 MR - addressed in versions ARN 00.032.02, RN 1.000
ELS61-E Rel.1 MR - addressed in versions ARN 00.032.02, RN 1.000
ELS61-E Rel.2 - addressed in versions ARN 01.000.03, RN 2.000
ELS81-E Rel.1.1 - addressed in versions ARN 01.000.04, RN 5.001
ELS81-E Rel.1 - addressed in versions ARN 01.000.05, RN 4.000
ELS61-US REL.2 - addressed in versions ARN 01.000.05, RN 2.012
ELS81-US Rel.1.1 - addressed in versions ARN 01.000.05, RN 5.012
EHS8 Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
EHS6 Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
PDS5-E Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
PLS62-W Rel.1 - addressed in versions ARN 01.000.06, RN 4.013
EHS5 - addressed in versions ARN 01.000.06, RN 4.013
BGS5 - addressed in versions ARN 01.001.08, RN 2.000
PDS5-E Rel.1 - addressed in versions ARN 00.000.32, RN 3.001
EHS6 Rel.3 - addressed in versions ARN 00.000.49, RN 3.001
EHS8 - addressed in versions ARN 00.000.60, 3.011
ELS61-AUS Rel.1 MR - addressed in versions ARN 00.005.01, RN 1.005
ELS61-AUS REL.1 - addressed in versions ARN 00.006.01, RN 1.004
ELS61-E2 REL.1 - addressed in versions ARN 00.026.01, RN 1.000
ELS61-US Rel.1 MR - addressed in versions ARN 00.028.01, RN 1.01
ELS61-E REL.1 - addressed in versions ARN 00.030.01, RN 1.000
ELS61-E2 Rel.1 MR - addressed in versions ARN 00.032.02, RN 1.000
ELS61-E Rel.1 MR - addressed in versions ARN 00.032.02, RN 1.000
ELS61-E Rel.2 - addressed in versions ARN 01.000.03, RN 2.000
ELS81-E Rel.1.1 - addressed in versions ARN 01.000.04, RN 5.001
ELS81-E Rel.1 - addressed in versions ARN 01.000.05, RN 4.000
ELS61-US REL.2 - addressed in versions ARN 01.000.05, RN 2.012
ELS81-US Rel.1.1 - addressed in versions ARN 01.000.05, RN 5.012
EHS8 Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
EHS6 Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
PDS5-E Rel.4 - addressed in versions ARN 01.000.06, RN 4.013
PLS62-W Rel.1 - addressed in versions ARN 01.000.06, RN 4.013
EHS5 - addressed in versions ARN 01.000.06, RN 4.013
BGS5 - addressed in versions ARN 01.001.08, RN 2.000