A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to get access to a sensitive data on the targeted system.
The product uses an environment variable to store unencrypted sensitive information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bgs5_firmware | Telit | - (including) | - (including) |