#VU87695 Permissions, Privileges, and Access Controls in G5 digital fault recorder - CVE-2024-22078 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU87695

#VU87695 Permissions, Privileges, and Access Controls in G5 digital fault recorder - CVE-2024-22078

Published: March 21, 2024


Vulnerability identifier: #VU87695
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2024-22078
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
G5 digital fault recorder
Software vendor:
Elspec

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to weak filesystem permissions in network configuration script, which leads to security restrictions bypass and privilege escalation.


Remediation

Install updates from vendor's website.

External links