Skip to content
Fencer Vulns
low 3.3

CVE-2023-47614 json

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/…

published 2023-11-10 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-51725

cvss
3.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 11%
public exploits
0
none known

Summary

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.

Patch / fix

  • Telit Cinterion BGS5 2.000 ARN 01.001.08
  • Telit Cinterion EHS5-E 4.013 ARN 01.000.06
  • Telit Cinterion EHS5-US 4.000
  • Telit Cinterion EHS5-US Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS6 2.000
  • Telit Cinterion EHS6 Rel.2 2.000 ARN 00.000.20
  • Telit Cinterion EHS6 Rel.3 3.001 ARN 00.000.49
  • Telit Cinterion EHS6 Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS6-A Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion EHS8 3.011 ARN 00.000.60
  • Telit Cinterion EHS8 Rel.4 4.013 ARN 01.000.06
  • Telit Cinterion ELS61-AUS 1.000
  • Telit Cinterion ELS61-AUS Rel.1 1.004 ARN 00.003.01
  • Telit Cinterion ELS61-AUS Rel.1 MR 1.005 ARN 00.005.01
  • Telit Cinterion ELS61-E 1.000
  • Telit Cinterion ELS61-E Rel.1 1.000 ARN 00.030.01
  • Telit Cinterion ELS61-E Rel.1 MR 1.000 ARN 00.032.02
  • Telit Cinterion ELS61-E Rel.2 2.000 ARN 01.000.03
  • Telit Cinterion ELS61-E2 Rel.1 1.000 ARN 00.026.01
  • Telit Cinterion ELS61-E2 Rel.1 MR 1.000 ARN 00.032.02
  • Telit Cinterion ELS61-US Rel.1 MR 1.01 ARN 00.028.01
  • Telit Cinterion ELS61-US Rel.2 2.012 ARN 01.000.05
  • Telit Cinterion ELS81-E 4.000
  • Telit Cinterion ELS81-E Rel.1 4.000 ARN 01.000.05
  • Telit Cinterion ELS81-E Rel.1.1 5.001 ARN 01.000.04
  • Telit Cinterion ELS81-US 5.012
  • Telit Cinterion ELS81-US Rel.1.1 5.012 ARN 01.000.05
  • Telit Cinterion PDS5-E 3.001
  • Telit Cinterion PDS5-E Rel.1 3.001 ARN 00.000.32
  • Telit Cinterion PDS5-E Rel.4 4.013 ARN 01.000.06

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-100-09 updated cvss 3.2

ABB Arctic Wireless Gateways

  • ABB Arctic Wireless Gateways
    affected: mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

  • Telit Cinterion BGS5
  • Telit Cinterion EHS5-E
  • Telit Cinterion EHS5-US
  • Telit Cinterion EHS5-US Rel.4
  • Telit Cinterion EHS6
  • Telit Cinterion EHS6 Rel.2
  • Telit Cinterion EHS6 Rel.3
  • Telit Cinterion EHS6 Rel.4
  • Telit Cinterion EHS6-A Rel.4
  • Telit Cinterion EHS8
  • Telit Cinterion EHS8 Rel.4
  • Telit Cinterion ELS61-AUS
  • Telit Cinterion ELS61-AUS Rel.1
  • Telit Cinterion ELS61-AUS Rel.1 MR
  • Telit Cinterion ELS61-E
  • Telit Cinterion ELS61-E Rel.1
  • Telit Cinterion ELS61-E Rel.1 MR
  • Telit Cinterion ELS61-E Rel.2
  • Telit Cinterion ELS61-E2 Rel.1
  • Telit Cinterion ELS61-E2 Rel.1 MR
  • Telit Cinterion ELS61-US Rel.1 MR
  • Telit Cinterion ELS61-US Rel.2
  • Telit Cinterion ELS81-E
  • Telit Cinterion ELS81-E Rel.1
  • Telit Cinterion ELS81-E Rel.1.1
  • Telit Cinterion ELS81-US
  • Telit Cinterion ELS81-US Rel.1.1
  • Telit Cinterion PDS5-E
  • Telit Cinterion PDS5-E Rel.1
  • Telit Cinterion PDS5-E Rel.4
  • Telit Cinterion PDS5-US
  • Telit Cinterion PDS6
  • Telit Cinterion PDS8
  • Telit Cinterion PLS62-W
  • Telit Cinterion PLS62-W Rel.1

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.