Description
A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Telit Cinterion | BGS5 | < 2.000 ARN 01.001.08 | 2.000 ARN 01.001.08 |
| Telit Cinterion | EHS5-E | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS5-US | < 4.000 | 4.000 |
| Telit Cinterion | EHS5-US Rel.4 | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS6 | < 2.000 | 2.000 |
| Telit Cinterion | EHS6 Rel.2 | < 2.000 ARN 00.000.20 | 2.000 ARN 00.000.20 |
| Telit Cinterion | EHS6 Rel.3 | < 3.001 ARN 00.000.49 | 3.001 ARN 00.000.49 |
| Telit Cinterion | EHS6 Rel.4 | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS6-A Rel.4 | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | EHS8 | < 3.011 ARN 00.000.60 | 3.011 ARN 00.000.60 |
| Telit Cinterion | EHS8 Rel.4 | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | ELS61-AUS | < 1.000 | 1.000 |
| Telit Cinterion | ELS61-AUS Rel.1 | < 1.004 ARN 00.003.01 | 1.004 ARN 00.003.01 |
| Telit Cinterion | ELS61-AUS Rel.1 MR | < 1.005 ARN 00.005.01 | 1.005 ARN 00.005.01 |
| Telit Cinterion | ELS61-E | < 1.000 | 1.000 |
| Telit Cinterion | ELS61-E Rel.1 | < 1.000 ARN 00.030.01 | 1.000 ARN 00.030.01 |
| Telit Cinterion | ELS61-E Rel.1 MR | < 1.000 ARN 00.032.02 | 1.000 ARN 00.032.02 |
| Telit Cinterion | ELS61-E Rel.2 | < 2.000 ARN 01.000.03 | 2.000 ARN 01.000.03 |
| Telit Cinterion | ELS61-E2 Rel.1 | < 1.000 ARN 00.026.01 | 1.000 ARN 00.026.01 |
| Telit Cinterion | ELS61-E2 Rel.1 MR | < 1.000 ARN 00.032.02 | 1.000 ARN 00.032.02 |
| Telit Cinterion | ELS61-US Rel.1 MR | < 1.01 ARN 00.028.01 | 1.01 ARN 00.028.01 |
| Telit Cinterion | ELS61-US Rel.2 | < 2.012 ARN 01.000.05 | 2.012 ARN 01.000.05 |
| Telit Cinterion | ELS81-E | < 4.000 | 4.000 |
| Telit Cinterion | ELS81-E Rel.1 | < 4.000 ARN 01.000.05 | 4.000 ARN 01.000.05 |
| Telit Cinterion | ELS81-E Rel.1.1 | < 5.001 ARN 01.000.04 | 5.001 ARN 01.000.04 |
| Telit Cinterion | ELS81-US | < 5.012 | 5.012 |
| Telit Cinterion | ELS81-US Rel.1.1 | < 5.012 ARN 01.000.05 | 5.012 ARN 01.000.05 |
| Telit Cinterion | PDS5-E | < 3.001 | 3.001 |
| Telit Cinterion | PDS5-E Rel.1 | < 3.001 ARN 00.000.32 | 3.001 ARN 00.000.32 |
| Telit Cinterion | PDS5-E Rel.4 | < 4.013 ARN 01.000.06 | 4.013 ARN 01.000.06 |
| Telit Cinterion | PDS5-US | — | — |
| Telit Cinterion | PDS6 | — | — |
| Telit Cinterion | PDS8 | — | — |
| Telit Cinterion | PLS62-W | < 2.01 | 2.01 |
| Telit Cinterion | PLS62-W Rel.1 | < 2.01 ARN 01.000.05 | 2.01 ARN 01.000.05 |
Advisories 2
- ICSA-25-100-09 ABB Arctic Wireless Gateways CISA ICS & IT advisories · Apr 7, 2025
- 2NGA002427 ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities ABB PSIRT · Apr 7, 2025