Elspec G5 Digital Fault Recorder Incorrect Default Permissions (CVE-2024-22085)

An issue was discovered in Elspec G5 digital fault recorder. The shadow file is world readable This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CVE-2024-22085

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before) is vulnerable to a security issue where the shadow file is world readable . This incorrect default permission (CWE-276) allows an attacker to read the shadow file, potentially leading to a high impact on confidentiality. As of th...

CVE-2024-22085

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...

CVE-2024-22085

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...