Sergey Anufrienko

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** A vulnerability exists that could allow a local, low privileged attacker to get access to sensitive data on the targeted system through exposure of sensitive information via environmental variables. The exploitation of this vulnerability may permit an attacker to obtain protected information. **Recommendations** For Telit Cinterion BGS5, consider restricting access to sensitive environmental variables until a patch is available. For Telit Cinterion EHS5/6/8, restrict access to sensitive data to minimize the risk of exploitation. For Telit Cinterion PDS5/6/8, avoid using sensitive environmental variables in the affected system until the issue is resolved. For Telit Cinterion ELS61/81, consider disabling access to sensitive information to prevent exploitation. For Telit Cinterion PLS62, restrict access to protected data to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** The issue is related to the exposure of sensitive information. An attacker with physical access to the target system could exploit this to gain access to sensitive data on the targeted system. **Recommendations** For Telit Cinterion BGS5, consider restricting physical access to the system until a fix is available. For Telit Cinterion EHS5/6/8, limit access to sensitive data to minimize the risk of exploitation. For Telit Cinterion PDS5/6/8, restrict access to the system to prevent unauthorized access to sensitive information. For Telit Cinterion ELS61/81, ensure that physical security measures are in place to prevent exploitation. For Telit Cinterion PLS62, consider implementing additional security controls to protect sensitive data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion EHS5/6/8 (affected versions not specified) Telit Cinterion BGS5 (affected versions not specified) Telit Cinterion PDS5/6/8 (affected versions not specified) **Description** A Buffer Copy without Checking Size of Input vulnerability exists in the Telit Cinterion modems, which could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message. The vulnerability is related to the User Plane Location (SUPL) message handler and is associated with a heap-based buffer overflow. This issue may expose industrial and healthcare sectors to remote attacks via SMS, allowing remote code execution without authentication. **Recommendations** For Telit Cinterion EHS5/6/8, consider disabling the SMS message handler until a patch is available. For Telit Cinterion BGS5, restrict access to the SUPL message handler to minimize the risk of exploitation. For Telit Cinterion PDS5/6/8, avoid using the vulnerable message handler until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** The issue is related to the exposure of sensitive information. Exploitation of this issue may allow an attacker to obtain information about hidden virtual paths and file names on the targeted system. A local, low-privileged attacker could disclose this sensitive information. **Recommendations** For Telit Cinterion BGS5, consider restricting access to sensitive information until a patch is available. For Telit Cinterion EHS5/6/8, avoid using hidden virtual paths and file names in sensitive operations until the issue is resolved. For Telit Cinterion PDS5/6/8, restrict access to the system to minimize the risk of exploitation. For Telit Cinterion ELS61/81, consider disabling access to sensitive files and paths until a fix is provided. For Telit Cinterion PLS62, limit the privileges of local attackers to prevent disclosure of sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** A vulnerability exists that could allow an attacker with physical access to the target system to obtain read/write access to any files and directories on the targeted system, including hidden files and directories. This issue is related to the use of files and directories accessible to external parties. **Recommendations** For Telit Cinterion BGS5, consider restricting access to sensitive files and directories to minimize the risk of exploitation. For Telit Cinterion EHS5/6/8, restrict access to critical system files to prevent unauthorized modifications. For Telit Cinterion PDS5/6/8, limit access to configuration files to reduce the risk of system compromise. For Telit Cinterion ELS61/81, restrict access to system directories to prevent unauthorized access. For Telit Cinterion PLS62, consider disabling access to sensitive system files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** A vulnerability exists in the Telit Cinterion software that is related to improper privilege management. This issue could allow a local, low-privileged attacker to elevate privileges to the "manufacturer" level on the targeted system. The exploitation of this vulnerability may enable an attacker to gain higher privileges in the system. **Recommendations** For Telit Cinterion BGS5, consider restricting access to sensitive areas of the system until a patch is available. For Telit Cinterion EHS5/6/8, restrict privileges to the lowest level necessary for operation to minimize the risk of exploitation. For Telit Cinterion PDS5/6/8, avoid using the system with low-privileged access until the issue is resolved. For Telit Cinterion ELS61/81, limit system access to trusted users only as a temporary workaround. For Telit Cinterion PLS62, disable any non-essential features that may be exploited to elevate privileges until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 **Description** A Relative Path Traversal issue exists that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system. This vulnerability is related to a software issue in the Telit Cinterion modems, which can be exploited to gain read and write access to arbitrary system files. **Recommendations** For Telit Cinterion BGS5, consider restricting access to sensitive files and directories to minimize the risk of exploitation. For Telit Cinterion EHS5/6/8, restrict access to protected files on the system until a patch is available. For Telit Cinterion PDS5/6/8, avoid using vulnerable functions that allow file access until the issue is resolved. For Telit Cinterion ELS61/81, consider disabling access to virtual directories to prevent attackers from escaping and accessing protected files. For Telit Cinterion PLS62, restrict access to the system's file system to prevent read and write access to arbitrary files.