Vulnerability Description
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to administrative privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Elspec-Ltd | G5Dfr Firmware | < 1.2.1.12 |
| Elspec-Ltd | G5Dfr | - |
Related Weaknesses (CWE)
References
- https://www.elspec-ltd.com/support/security-advisories/Vendor Advisory
- https://www.elspec-ltd.com/support/security-advisories/Vendor Advisory
FAQ
What is CVE-2024-22078?
CVE-2024-22078 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem ...
How severe is CVE-2024-22078?
CVE-2024-22078 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-22078?
Check the references section above for vendor advisories and patch information. Affected products include: Elspec-Ltd G5Dfr Firmware, Elspec-Ltd G5Dfr.