Description
A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Telit Cinterion | BGS5 | — | — |
| Telit Cinterion | EHS5 | — | — |
| Telit Cinterion | EHS6 | — | — |
| Telit Cinterion | EHS8 | — | — |
| Telit Cinterion | PDS5 | — | — |
| Telit Cinterion | PDS6 | — | — |
| Telit Cinterion | PDS8 | — | — |
| Telit Cinterion | ELS61 | — | — |
| Telit Cinterion | ELS81 | — | — |
| Telit Cinterion | PLS62 | — | — |
Advisories 2
- ICSA-25-100-09 ABB Arctic Wireless Gateways CISA ICS & IT advisories · Apr 7, 2025
- 2NGA002427 ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities ABB PSIRT · Apr 7, 2025
References
- KLCERT-22-211: Telit Cinterion (Thales/Gemalto) modules. Relative Path Traversal third-party-advisory