107 matches found
CVE-2024-46603
An XML External Entity XXE vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service DoS via a crafted XML payload...
CVE-2024-46601
Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow...
CVE-2024-46602
An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload...
Elspec G5 Digital Fault Recorder Use of Hard-coded Credentials (CVE-2024-22083)
An issue was discovered in Elspec G5 digital fault recorder. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Elspec G5 Digital Fault Recorder Improper Handling of Insufficient Permissions or Privileges (CVE-2024-22077)
An issue was discovered in Elspec G5 digital fault recorder. The SQLite database file has weak permissions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descriptio...
Elspec G5 Digital Fault Recorder Improper Handling of Insufficient Permissions or Privileges (CVE-2024-22078)
An issue was discovered in Elspec G5 digital fault recorder. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to...
Elspec G5 Digital Fault Recorder Exposure of Information Through Directory Listing (CVE-2024-22082)
An issue was discovered in Elspec G5 digital fault recorder. Unauthenticated directory listing can occur: the web interface cay be abused by an attacker get a better understanding of the operating system. This plugin only works with Tenable.ot. Please visit...
Elspec G5 Digital Fault Recorder Path Traversal (CVE-2024-22079)
An issue was discovered in Elspec G5 digital fault recorder. Directory traversal can occur via the system logs download mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Elspec G5 Digital Fault Recorder Inconsistent Interpretation of HTTP Requests (CVE-2024-22081)
An issue was discovered in Elspec G5 digital fault recorder. Unauthenticated memory corruption can occur in the HTTP header parsing mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Elspec G5 Digital Fault Recorder Incorrect Default Permissions (CVE-2024-22085)
An issue was discovered in Elspec G5 digital fault recorder. The shadow file is world readable This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Elspec G5 Digital Fault Recorder Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-22080)
An issue was discovered in Elspec G5 digital fault recorder. Unauthenticated memory corruption can occur during XML body parsing. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Elspec G5 Digital Fault Recorder VsFTPd Service Denial of Service (CVE-2021-30047)
Outdated vsftpd service with known DoS issue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502820; scriptversion"1.2";...
Elspec G5 Digital Fault Recorder Cleartext Storage of Sensitive Information (CVE-2024-22084)
An issue was discovered in Elspec G5 digital fault recorder. Cleartext passwords and hashes are exposed through log files This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc';...
Elspec G5 Digital Fault Recorder Improper Restriction of XML External Entity Reference (CVE-2024-46603)
An issue was discovered in Elspec G5 digital fault recorder. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Elspec G5 Digital Fault Recorder Stored Cross-Site Scripting (CVE-2024-46602)
An issue was discovered in Elspec G5 digital fault recorder. A stored cross-site scripting XSS vulnerability may allow an attacker to execute arbitrary web scripts or HTML. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Elspec G5 Digital Fault Recorder Buffer Overflow (CVE-2024-46601)
An issue was discovered in Elspec G5 digital fault recorder. A buffer overflow vulnerability may allow an attacker to execute arbitrary code on the operating system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...
CVE-2024-46602
An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload...
CVE-2024-46603
An XML External Entity XXE vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service DoS via a crafted XML payload...
