CVE-2023-47610

—

CVSS 3.1

9.8 critical

EPSS

2%p76

Published

Nov 9, 2023 (Nov 9, 2023)

Modified

Jun 17, 2026

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

Vendors: telit
Products: bgs5 firmware, ehs5 firmware, ehs6 firmware, ehs8 firmware, pds5 firmware, pds6 firmware, pds8 firmware, els61 firmware, els81 firmware, pls62 firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news3 stories

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

The Hacker NewsJun 19, 15:17 UTC · Jun 19, 2024Vulnerability CVE-2023-47610 CVE-2023-47611 CVE-2023-47612+4 CVEs

Critical Vulnerabilities in Cinterion Modems Exposed

Infosecurity MagazineMay 13, 17:00 UTC · May 13, 2024Vulnerability CVE-2023-47610

Friday Squid Blogging: Squid Mating Strategies

Schneier on SecurityMay 10, 21:07 UTC · May 10, 2024Vulnerability CVE-2023-47610