CVE-2023-47611
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit...
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
- Record
CVE-2023-47611- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
EUVDEUVD-2023-51722
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
- Record
EUVD-2023-51722- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg8w-6qgx-cvp8
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit...
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
- Record
GHSA-wg8w-6qgx-cvp8- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
NVD
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
- Record
CVE-2023-47611- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
- telit cinterion bgs5
- telit cinterion ehs5-e
- telit cinterion ehs5-us
- telit cinterion ehs5-us rel.4
- telit cinterion ehs6
- telit cinterion ehs6 rel.2
- telit cinterion ehs6 rel.3
- telit cinterion ehs6 rel.4
- telit cinterion ehs6-a rel.4
- telit cinterion ehs8
- telit cinterion ehs8 rel.4
- telit cinterion els61-aus
Show 33 moreShow less
- telit cinterion els61-aus rel.1
- telit cinterion els61-aus rel.1 mr
- telit cinterion els61-e
- telit cinterion els61-e rel.1
- telit cinterion els61-e rel.1 mr
- telit cinterion els61-e rel.2
- telit cinterion els61-e2 rel.1
- telit cinterion els61-e2 rel.1 mr
- telit cinterion els61-us rel.1 mr
- telit cinterion els61-us rel.2
- telit cinterion els81-e
- telit cinterion els81-e rel.1
- telit cinterion els81-e rel.1.1
- telit cinterion els81-us
- telit cinterion els81-us rel.1.1
- telit cinterion pds5-e
- telit cinterion pds5-e rel.1
- telit cinterion pds5-e rel.4
- telit cinterion pds5-us
- telit cinterion pds6
- telit cinterion pds8
- telit cinterion pls62-w
- telit cinterion pls62-w rel.1
- telit bgs5 firmware
- telit ehs5 firmware
- telit ehs6 firmware
- telit ehs8 firmware
- telit els61 firmware
- telit els81 firmware
- telit pds5 firmware
- telit pds6 firmware
- telit pds8 firmware
- telit pls62 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-47611 is a high vulnerability (CVSS 7.8) in Telit Cinterion Bgs5, published November 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.