CVE-2023-47614

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Telit CinterionBGS5< 2.000 ARN 01.001.08
Telit CinterionEHS5-E< 4.013 ARN 01.000.06
Telit CinterionEHS5-US< 4.000
Telit CinterionEHS5-US Rel.4< 4.013 ARN 01.000.06
Telit CinterionEHS6< 2.000
Telit CinterionEHS6 Rel.2< 2.000 ARN 00.000.20
Telit CinterionEHS6 Rel.3< 3.001 ARN 00.000.49
Telit CinterionEHS6 Rel.4< 4.013 ARN 01.000.06
Telit CinterionEHS6-A Rel.4< 4.013 ARN 01.000.06
Telit CinterionEHS8< 3.011 ARN 00.000.60
Telit CinterionEHS8 Rel.4< 4.013 ARN 01.000.06
Telit CinterionELS61-AUS< 1.000
Telit CinterionELS61-AUS Rel.1< 1.004 ARN 00.003.01
Telit CinterionELS61-AUS Rel.1 MR< 1.005 ARN 00.005.01
Telit CinterionELS61-E< 1.000
Telit CinterionELS61-E Rel.1< 1.000 ARN 00.030.01
Telit CinterionELS61-E Rel.1 MR< 1.000 ARN 00.032.02
Telit CinterionELS61-E Rel.2< 2.000 ARN 01.000.03
Telit CinterionELS61-E Rel.2< 2.000 ARN 01.000.03
Telit CinterionELS61-E2 Rel.1< 1.000 ARN 00.026.01
Telit CinterionELS61-E2 Rel.1 MR< 1.000 ARN 00.032.02
Telit CinterionELS61-US Rel.1 MR< 1.01 ARN 00.028.01
Telit CinterionELS61-US Rel.2< 2.012 ARN 01.000.05
Telit CinterionELS81-E< 4.000
Telit CinterionELS81-E Rel.1< 4.000 ARN 01.000.05
Telit CinterionELS81-E Rel.1.1< 5.001 ARN 01.000.04
Telit CinterionELS81-US< 5.012
Telit CinterionELS81-US Rel.1.1< 5.012 ARN 01.000.05
Telit CinterionPDS5-E< 3.001
Telit CinterionPDS5-E Rel.1< 3.001 ARN 00.000.32
Telit CinterionPDS5-E Rel.4< 4.013 ARN 01.000.06
Telit CinterionPDS5-US—
Telit CinterionPDS6—
Telit CinterionPDS8—
Telit CinterionPLS62-W< 2.01
Telit CinterionPLS62-W Rel.1< 2.01 ARN 01.000.05

References

Timeline

Published
Nov 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-476155.5A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion ECVE-2023-476164.6A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8CVE-2023-476177.2A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN RouteCVE-2023-476187.2A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1CVE-2023-476196.5Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to readCVE-2023-47628.8Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (CVE-2023-476206.1Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability eCVE-2023-476218.8Guest Entries is a php library which allows users to create, update & delete entries from the front-end of a site. In affected versions the CVE-2023-476226.1iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and CVE-2023-476236.1Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability eCVE-2023-476246.5Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their permissions) may beCVE-2023-476254.3PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_