Description
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Telit Cinterion | EHS5 | — | — |
| Telit Cinterion | EHS6 | — | — |
| Telit Cinterion | EHS8 | — | — |
Advisories 2
- ICSA-25-100-09 ABB Arctic Wireless Gateways CISA ICS & IT advisories · Apr 7, 2025
- 2NGA002427 ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities ABB PSIRT · Apr 7, 2025