CVE-2023-47614
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in...
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
- Record
CVE-2023-47614- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2023-51725
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
- Record
EUVD-2023-51725- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rh3-6cv6-ffc9
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in...
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
- Record
GHSA-2rh3-6cv6-ffc9- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
- Record
CVE-2023-47614- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- telit cinterion bgs5
- telit cinterion ehs5-e
- telit cinterion ehs5-us
- telit cinterion ehs5-us rel.4
- telit cinterion ehs6
- telit cinterion ehs6 rel.2
- telit cinterion ehs6 rel.3
- telit cinterion ehs6 rel.4
- telit cinterion ehs6-a rel.4
- telit cinterion ehs8
- telit cinterion ehs8 rel.4
- telit cinterion els61-aus
Show 33 moreShow less
- telit cinterion els61-aus rel.1
- telit cinterion els61-aus rel.1 mr
- telit cinterion els61-e
- telit cinterion els61-e rel.1
- telit cinterion els61-e rel.1 mr
- telit cinterion els61-e rel.2
- telit cinterion els61-e2 rel.1
- telit cinterion els61-e2 rel.1 mr
- telit cinterion els61-us rel.1 mr
- telit cinterion els61-us rel.2
- telit cinterion els81-e
- telit cinterion els81-e rel.1
- telit cinterion els81-e rel.1.1
- telit cinterion els81-us
- telit cinterion els81-us rel.1.1
- telit cinterion pds5-e
- telit cinterion pds5-e rel.1
- telit cinterion pds5-e rel.4
- telit cinterion pds5-us
- telit cinterion pds6
- telit cinterion pds8
- telit cinterion pls62-w
- telit cinterion pls62-w rel.1
- telit bgs5 firmware
- telit ehs5 firmware
- telit ehs6 firmware
- telit ehs8 firmware
- telit els61 firmware
- telit els81 firmware
- telit pds5 firmware
- telit pds6 firmware
- telit pds8 firmware
- telit pls62 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-47614 is a low vulnerability (CVSS 3.3) in Telit Cinterion Bgs5, published November 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.