Republished vendor advisory. This CISA CSAF advisory was converted from ABB PSIRT's CSAF advisory.
Mitigating factors: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
Credit: ABB
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2023-47610 | CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 8.1 High |
CVE-2023-47610 A buffer overflow vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted Short Message Service (SMS) message. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2024-6387 | CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 8.1 High |
CVE-2024-6387 The vulnerability is a signal handler race condition in OpenSSH’s server (sshd) on glibc-based Linux systems, allowing unauthenticated remote code execution (RCE) as root. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47611 | CWE-269 Improper Privilege Management | 6.8 Medium |
CVE-2023-47611 Improper Privilege Management vulnerability that could allow a local that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system by sending a specially crafted SMS message. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47612 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 6.8 Medium |
CVE-2023-47612 Files or Directories Accessible to External Parties vulnerability that could allow an attacker with physical access to the target system to obtain a read/write access to any files and directories on the wireless modem module, including hidden files and directories. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47616 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 4.6 Medium |
CVE-2023-47616 Exposure of Sensitive Information to an unauthorized actor vulnerability that could allow an attacker with physical access to the target system to get access to sensitive data on the wireless modem mod-ule. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47615 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 4.3 Medium |
CVE-2023-47615 Exposure of Sensitive Information Through Environmental Variables vulnerability that could allow a local, low privileged attacker to get access to sensitive data on the wireless modem module. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47613 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 3.2 Low |
CVE-2023-47613 Relative Path Traversal vulnerability that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the wireless modem module. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
| CVE-2023-47614 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 3.2 Low |
CVE-2023-47614 Exposure of Sensitive Information to an unauthorized actor vulnerability that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the wireless modem module. Mitigation: The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network ope… Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2023-47610 | 8.1 High | Telit Cinterion EHS5 A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated atta… |
| CVE-2024-6387 | 8.1 High | — A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals… |
| CVE-2023-47611 | 7.8 High | Telit Cinterion BGS5 A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cint… |
| CVE-2023-47612 | 6.8 Medium | Telit Cinterion BGS5 A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterio… |
| CVE-2023-47613 | 4.4 Medium | Telit Cinterion BGS5 A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion E… |
| CVE-2023-47614 | 3.3 Low | Telit Cinterion BGS5 A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit C… |
| CVE-2023-47615 | 3.3 Low | Telit Cinterion BGS5 A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, … |
| CVE-2023-47616 | 2.4 Low | Telit Cinterion BGS5 A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit C… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.