A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.000 ARN 01.001.08, 4.013 ARN 01.000.06, 4.000, 2.000, 2.000 ARN 00.000.20, and 19 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Telit Cinterion BGS5
fixed in 2.000 ARN 01.001.08
- Telit Cinterion EHS5-E
fixed in 4.013 ARN 01.000.06
- Telit Cinterion EHS5-US
fixed in 4.000
- Telit Cinterion EHS5-US Rel.4
fixed in 4.013 ARN 01.000.06
- Telit Cinterion EHS6
fixed in 2.000
- Telit Cinterion EHS6 Rel.2
fixed in 2.000 ARN 00.000.20
- Telit Cinterion EHS6 Rel.3
fixed in 3.001 ARN 00.000.49
- Telit Cinterion EHS6 Rel.4
fixed in 4.013 ARN 01.000.06
- Telit Cinterion EHS6-A Rel.4
fixed in 4.013 ARN 01.000.06
- Telit Cinterion EHS8
fixed in 3.011 ARN 00.000.60
- Telit Cinterion EHS8 Rel.4
fixed in 4.013 ARN 01.000.06
- Telit Cinterion ELS61-AUS
fixed in 1.000
- Telit Cinterion ELS61-AUS Rel.1
fixed in 1.004 ARN 00.003.01
- Telit Cinterion ELS61-AUS Rel.1 MR
fixed in 1.005 ARN 00.005.01
- Telit Cinterion ELS61-E
fixed in 1.000
- Telit Cinterion ELS61-E Rel.1
fixed in 1.000 ARN 00.030.01
- Telit Cinterion ELS61-E Rel.1 MR
fixed in 1.000 ARN 00.032.02
- Telit Cinterion ELS61-E Rel.2
fixed in 2.000 ARN 01.000.03
- Telit Cinterion ELS61-E Rel.2
fixed in 2.000 ARN 01.000.03
- Telit Cinterion ELS61-E2 Rel.1
fixed in 1.000 ARN 00.026.01
- Telit Cinterion ELS61-E2 Rel.1 MR
fixed in 1.000 ARN 00.032.02
- Telit Cinterion ELS61-US Rel.1 MR
fixed in 1.01 ARN 00.028.01
- Telit Cinterion ELS61-US Rel.2
fixed in 2.012 ARN 01.000.05
- Telit Cinterion ELS81-E
fixed in 4.000
- Telit Cinterion ELS81-E Rel.1
fixed in 4.000 ARN 01.000.05
- Telit Cinterion ELS81-E Rel.1.1
fixed in 5.001 ARN 01.000.04
- Telit Cinterion ELS81-US
fixed in 5.012
- Telit Cinterion ELS81-US Rel.1.1
fixed in 5.012 ARN 01.000.05
- Telit Cinterion PDS5-E
fixed in 3.001
- Telit Cinterion PDS5-E Rel.1
fixed in 3.001 ARN 00.000.32
- Telit Cinterion PDS5-E Rel.4
fixed in 4.013 ARN 01.000.06
- Telit Cinterion PDS5-US
Version range not reported
- Telit Cinterion PDS6
Version range not reported
- Telit Cinterion PDS8
Version range not reported
- Telit Cinterion PLS62-W
fixed in 2.01
- Telit Cinterion PLS62-W Rel.1
fixed in 2.01 ARN 01.000.05