Telit Cinterion IoT Traversal / Escalation / Bypass / Heap Overflow

This is an extension of research on the original findings of CVE-2020-15858 in Telit Cinterion IoT devices. Numerous issues have been discovered including path traversal, Java privilege elevation, AT commands whitelist / blacklist bypass, a heap overflow in fragmented SMS, and more.

bypass cinterion cve devices escalation extension findings iot iot devices java overflow path path traversal privilege research sms telit whitelist