Paper/Archive/CVE-2024-22081

CVE-2024-22081

elspec g5_digital_fault_recorder — An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 56.1.561 × 2011.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur in the HTTP header parsing mechanism.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

g5_digital_fault_recorder≤ 1.1.4.15–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refelspec-ltd.com/support/security-advisories