CVE-2023-35830

Name of the Vulnerable Software and Affected Versions STW TCG-4 Connectivity Module versions 3.03r0-Impala through 3.04r2-Jellyfish STW TCG-4lite Connectivity Module version 3.04r2-Jellyfish

Description The issue allows an attacker to gain full remote access with root privileges without the need for authentication, giving an attacker arbitrary remote code execution over LTE / 4G network via SMS.

Recommendations For STW TCG-4 Connectivity Module versions 3.03r0-Impala through 3.04r2-Jellyfish, consider disabling remote access via SMS until a patch is available. For STW TCG-4lite Connectivity Module version 3.04r2-Jellyfish, consider disabling remote access via SMS until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.