CVE-2024-46602

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier

High · published January 7, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.5th percentile
Published
2025-01-07T00:00Z
EPSS history
Timeline
  • 07 JAN 00:00Z
    An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier
    cvelistv5