Medium severity · published Aug 21, 2020
CVE-2020-15858
Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers
6.4
CVSS
0.8%
EPSS
No
On KEV
Description
Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for customer Java applications, TLS and OTAP (Java over-the-air-provisioning) functionality. The affected products and releases are: BGS5 up to and including SW RN 02.000 / ARN 01.001.06 EHSx and PDSx up to and including SW RN 04.003 / ARN 01.000.04 ELS61 up to and including SW RN 02.002 / ARN 01.000.04 ELS81 up to and including SW RN 05.002 / ARN 01.000.04 PLS62 up to and including SW RN 02.000 / ARN 01.000.04
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bgs5 Firmware · Thalesgroup
through rn_02.000_\/_arn_01.001.06 · source: NVD
EF
Ehs5 Firmware · Thalesgroup
through rn_04.003_\/_arn_01.000.04 · source: NVD
EF
Ehs6 Firmware · Thalesgroup
through rn_04.003_\/_arn_01.000.04 · source: NVD
EF
Ehs8 Firmware · Thalesgroup
through rn_04.003_\/_arn_01.000.04 · source: NVD
EF
Els61 Firmware · Thalesgroup
through rn_02.002_\/_arn_01.000.04 · source: NVD
EF
Els81 Firmware · Thalesgroup
through rn_05.002_\/_arn_01.000.04 · source: NVD
PF
Pds5 Firmware · Thalesgroup
through rn_04.003_\/_arn_01.000.04 · source: NVD
PF
Pds6 Firmware · Thalesgroup
through rn_04.003_\/_arn_01.000.04 · source: NVD
PF
Pls62 Firmware · Thalesgroup
through rn_02.000_\/_arn_01.000.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15858
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15858
packetstormsecurity.com
http://packetstormsecurity.com/files/171978/Telit-Cinterion-IoT-Traversal-Escalation-Bypass-Heap-Overflow.html
seclists.org
http://seclists.org/fulldisclosure/2023/Apr/11
Vendor Advisory
https://www.thalesgroup.com/en/markets/digital-identity-and-security/iot/resources/security-updates-cinterion-iot-modules