CVE-2024-22078

Katalog CVE

CVSS 8.8 · High EPSS 0,64%

Kerentanan Improper Handling of Insufficient Permissions or Privileges pada elspec-ltd g5dfr firmware. Skor CVSS 3.1 8.8 (High) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to administrative privileges.

Rincian

Terbit di NVD

20 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-280: Improper Handling of Insufficient Permissions or Privileges

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.elspec-ltd.com/support/security-advisories/ advisory vendor