CVE-2023-47610: Telit BGS5 Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.

Affected products

• Telit BGS5 Firmware: affected versions not specified
• Telit EHS5 Firmware: affected versions not specified
• Telit EHS6 Firmware: affected versions not specified
• Telit EHS8 Firmware: affected versions not specified
• Telit ELS61 Firmware: affected versions not specified
• Telit ELS81 Firmware: affected versions not specified
• Telit PDS5 Firmware: affected versions not specified
• Telit PDS6 Firmware: affected versions not specified
• Telit PDS8 Firmware: affected versions not specified
• Telit PLS62 Firmware: affected versions not specified

Published 2023-11-09. Last modified 2026-06-17.