CVE-2023-47613

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-23CWE-22

Affected software

VendorProductVersions
Telit CinterionBGS5—
Telit CinterionEHS5—
Telit CinterionEHS6—
Telit CinterionEHS8—
Telit CinterionPDS5—
Telit CinterionPDS6—
Telit CinterionPDS8—
Telit CinterionELS61—
Telit CinterionELS81—
Telit CinterionPLS62—

References

Timeline

Published
Nov 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-476143.3A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8CVE-2023-476155.5A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion ECVE-2023-476164.6A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8CVE-2023-476177.2A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN RouteCVE-2023-476187.2A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1CVE-2023-476196.5Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to readCVE-2023-47628.8Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (CVE-2023-476206.1Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability eCVE-2023-476218.8Guest Entries is a php library which allows users to create, update & delete entries from the front-end of a site. In affected versions the CVE-2023-476226.1iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and CVE-2023-476236.1Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability eCVE-2023-476246.5Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their permissions) may be
CVE-2023-47613: High severity, CVSS 7.1 | Vulnix