An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HElspec Ltd G5dfr
HWElspec-Ltdwszystkie wersjeElspec Ltd G5dfr Firmware
OSElspec-Ltd< 1.2.2.19
π΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSXXE
CWE
Related vulnerabilities
CVE-2024-22081CRITICAL9.8PL βten sam produkt
Nieuwierzytelniona korupcja pamiΔci w Elspec G5 Digital Fault Recorder
CVE-2024-22080CRITICAL9.8PL βten sam produkt
Elspec G5 β nieuwierzytelnione uszkodzenie pamiΔci podczas parsowania XML
CVE-2024-46602HIGH7.5ten sam produkt
An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Enti...
CVE-2024-46601HIGH7.5ten sam produkt
Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.
CVE-2024-22079HIGH7.5ten sam produkt
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal ...