Cybersecurity experts have identified several vulnerabilities in Cinterion modems, which could allow hackers to access sensitive data and execute arbitrary code.
"These vulnerabilities are observed in critical technical flaws that enable remote code execution and unauthorized privilege escalation, exposing embedded communication networks and IoT, which are critical for the industrial, healthcare, automotive, financial and telecommunications sectors, to serious risks," according to Kaspersky.
Read also: Google: Fixes new zero-day vulnerability in Chrome browser
Cinterion modems were originally developed by Gemalto, which was then acquired by Telit in a deal announced in July 2022, under the auspices of Thales.
These findings were officially presented at OffensiveCon, a conference held in Berlin on May 11. A list of the eight flaws was given to the audience.
CVE-2023-47610 (CVSS score: 8.1) – A buffer leak vulnerability that allows remote hackers to execute arbitrary code on the targeted system, without requiring authentication, via sending a specially crafted SMS message.
CVE-2023-47611 (CVSS score: 7.8) – A privilege management vulnerability, which could allow a low-privileged hacker to gain administrator-level privileges on the targeted system.
CVE-2023-47612 (CVSS score: 6.8) – A vulnerability in files or folders, which are accessible from external sources, could allow a hacker with physical access to the target computer to gain read and write permissions to any file or folder on the targeted system, including hidden files and folders.
CVE-2023-47613 (CVSS score: 4.4) – A security related to inadequate file path handling could allow a low-privilege attacker to bypass virtual folders and gain read and write permissions to files that are protected.
CVE-2023-47614 (CVSS score: 3.3) – Disclosure of sensitive data vulnerability, which could allow a low-privileged hacker to discover hidden virtual paths and file names on the targeted system.
CVE-2023-47615 (CVSS score: 3.3) – Disclosure of sensitive data due to a vulnerability in environmental variables could allow hackers with low privileges to gain unauthorized access to a targeted system.
CVE-2023-47616 (CVSS score: 2.4) – vulnerability could allow hackers with physical access to the target computer to gain access to sensitive system data.
Security researchers Sergey Anufrienko and Alexander Kozlov have been credited with discovering and reporting the flaws, which were officially disclosed by Kaspersky ICS CERT in a series of advisories published on November 8, 2023.
"Given that modems are usually built in a matryoshka style, where products from one vendor are stacked with those from another, compiling a list of the final affected products proves to be complicated," notes Evgeny Goncharov, head of Kaspersky ICS CERT.".
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: LiteSpeed Cache plugin: Hackers gain control of WordPress sites through vulnerability
To address and mitigate potential threats, it is recommended for organizations to disable non-essential SMS messaging features, adopt the use of Access Point Names (APNs), ensure control of physical access to devices, and conduct systematic security audits and software updates.
Source: thehackernews
