CVE-2024-22077

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The SQLite database file has weak permissions...

CVE-2024-22077: Improper Handling of Insufficient Permissions or Privileges

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The SQLite database file has weak permissions...

CVE-2024-22077

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The SQLite database file has weak permissions...

CVE-2024-22080

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is susceptible to an unauthenticated memory corruption vulnerability during XML body parsing . This issue is categorized as an Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119). The vulnerability ...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 digital fault recorder version 1.1.4.15 and prior versions, which originates from an...

CVE-2024-22080: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur during XML body parsing...

CVE-2024-22082: Exposure of Information Through Directory Listing

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be abused be an attacker get a better understanding of the operating system...

CVE-2024-22083

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks...

CVE-2024-22082

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is vulnerable to an unauthenticated directory listing issue. This flaw allows an attacker to abuse the web interface to gain a better understanding of the underlying operating system . As a temporary workaround, it is recommende...

CVE-2024-22085

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...

CVE-2024-22081

The Elspec G5 digital fault recorder is vulnerable to unauthenticated memory corruption in the HTTP header parsing mechanism in versions 1.1.4.15 and before . This flaw can be triggered by a remote attacker without authentication. As a temporary workaround, users are advised to restrict access to...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 digital fault recorder version 1.1.4.15 and earlier, which originates from an...

CVE-2024-22085

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before) is vulnerable to a security issue where the shadow file is world readable . This incorrect default permission (CWE-276) allows an attacker to read the shadow file, potentially leading to a high impact on confidentiality. As of th...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 version 1.1.4.15 and earlier, which stems from the presence of a hard-coded backdoor sessi...

CVE-2024-22085: Incorrect Default Permissions

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...

CVE-2024-22084: Cleartext Storage of Sensitive Information

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Cleartext passwords and hashes are exposed through log files...

PT-2024-19188 · Elspec · Elspec G5 Digital Fault Recorder

Name of the Vulnerable Software and Affected Versions: Elspec G5 digital fault recorder versions 1.1.4.15 and before Description: An issue in the Elspec G5 digital fault recorder allows privilege escalation via world writable files. The network configuration script has weak filesystem permissions...

PT-2024-19191 · Elspec · Elspec G5 Digital Fault Recorder

Name of the Vulnerable Software and Affected Versions: Elspec G5 digital fault recorder versions 1.1.4.15 and before Description: An issue in the Elspec G5 digital fault recorder allows unauthenticated memory corruption to occur during XML body parsing. Recommendations: For Elspec G5 digital faul...

CLSA-2023-1676571183 Update of nss

Update to CKBI 2.60 from NSS 3.86 - Added: - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - Certificate "Certainly Root E1" - Certificate "Certainly Root R1" - Certificate "DigiCert SMIME ECC P384 Root G5" - Certificate "DigiCert SMIME RSA4096 Root G5" - Certificate...

CLSA-2023-1676570344 Update of ca-certificates

Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" - Certificate "Staat der...