Skip to content
Fencer Vulns
high 7.8

CVE-2023-47611 json

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8,…

published 2023-11-10 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-51722

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 11%
public exploits
0
none known

Summary

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.

Patch / fix

  • Telit Cinterion BGS5 2.000 ARN 01.001.08
  • Telit Cinterion EHS5-E 4.013 ARN 01.000.06
  • Telit Cinterion EHS5-US 4.000
  • Telit Cinterion EHS5-US Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS6 2.000
  • Telit Cinterion EHS6 Rel.2 2.000 ARN 00.000.20
  • Telit Cinterion EHS6 Rel.3 3.001 ARN 00.000.49
  • Telit Cinterion EHS6 Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS6-A Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS8 3.011 ARN 00.000.60
  • Telit Cinterion EHS8 Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion ELS61-AUS 1.000
  • Telit Cinterion ELS61-AUS Rel.1 1.004 ARN 00.003.01
  • Telit Cinterion ELS61-AUS Rel.1 MR 1.005 ARN 00.005.01
  • Telit Cinterion ELS61-E 1.000
  • Telit Cinterion ELS61-E Rel.1 1.000 ARN 00.030.01
  • Telit Cinterion ELS61-E Rel.1 MR 1.000 ARN 00.032.02
  • Telit Cinterion ELS61-E Rel.2 2.000 ARN 01.000.03
  • Telit Cinterion ELS61-E2 Rel.1 1.000 ARN 00.026.01
  • Telit Cinterion ELS61-E2 Rel.1 MR 1.000 ARN 00.032.02
  • Telit Cinterion ELS61-US Rel.1 MR 1.01 ARN 00.028.01
  • Telit Cinterion ELS61-US Rel.2 2.012 ARN 01.000.05
  • Telit Cinterion ELS81-E 4.000
  • Telit Cinterion ELS81-E Rel.1 4.000 ARN 01.000.05
  • Telit Cinterion ELS81-E Rel.1.1 5.001 ARN 01.000.04
  • Telit Cinterion ELS81-US 5.012
  • Telit Cinterion ELS81-US Rel.1.1 5.012 ARN 01.000.05
  • Telit Cinterion PDS5-E 3.001
  • Telit Cinterion PDS5-E Rel.1 3.001 ARN 00.000.32
  • Telit Cinterion PDS5-E Rel.4 4.013 ARN 01.000.06

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-100-09 updated cvss 6.8

ABB Arctic Wireless Gateways

  • ABB Arctic Wireless Gateways
    affected: mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Telit Cinterion BGS5
  • Telit Cinterion EHS5-E
  • Telit Cinterion EHS5-US
  • Telit Cinterion EHS5-US Rel.4
  • Telit Cinterion EHS6
  • Telit Cinterion EHS6 Rel.2
  • Telit Cinterion EHS6 Rel.3
  • Telit Cinterion EHS6 Rel.4
  • Telit Cinterion EHS6-A Rel.4
  • Telit Cinterion EHS8
  • Telit Cinterion EHS8 Rel.4
  • Telit Cinterion ELS61-AUS
  • Telit Cinterion ELS61-AUS Rel.1
  • Telit Cinterion ELS61-AUS Rel.1 MR
  • Telit Cinterion ELS61-E
  • Telit Cinterion ELS61-E Rel.1
  • Telit Cinterion ELS61-E Rel.1 MR
  • Telit Cinterion ELS61-E Rel.2
  • Telit Cinterion ELS61-E2 Rel.1
  • Telit Cinterion ELS61-E2 Rel.1 MR
  • Telit Cinterion ELS61-US Rel.1 MR
  • Telit Cinterion ELS61-US Rel.2
  • Telit Cinterion ELS81-E
  • Telit Cinterion ELS81-E Rel.1
  • Telit Cinterion ELS81-E Rel.1.1
  • Telit Cinterion ELS81-US
  • Telit Cinterion ELS81-US Rel.1.1
  • Telit Cinterion PDS5-E
  • Telit Cinterion PDS5-E Rel.1
  • Telit Cinterion PDS5-E Rel.4
  • Telit Cinterion PDS5-US
  • Telit Cinterion PDS6
  • Telit Cinterion PDS8
  • Telit Cinterion PLS62-W
  • Telit Cinterion PLS62-W Rel.1

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.