Telit Cinterion IoT Traversal / Escalation / Bypass / Heap Overflow

This is an extension of research on the original findings of CVE-2020-15858 in Telit Cinterion IoT devices. Numerous issues have been discovered including path traversal, Java privilege elevation, AT commands whitelist / blacklist bypass, a heap overflow in fragmented SMS, and more.

advisories | CVE-2020-15858