Elspec-ltd vulnerabilities
We track 8 vulnerabilities in Elspec-ltd products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2025.
Latest Elspec-ltd vulnerabilities
- 7.5 High severity
G5dfr Firmware: Improper Restriction of XML External Entity Reference
An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload.
- 7.5 High severity
G5dfr Firmware: Improper Restriction of XML External Entity Reference
An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload.
- 7.5 High severity
g5_digital_fault_recorder: Cleartext Storage of Sensitive Information
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Cleartext passwords and hashes are exposed through log files.
- 7.5 High severity
g5_digital_fault_recorder: Exposure of Information Through Directory Listing
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be abused be an attacker get a better understanding of the operating system.
- 9.8 Critical severity
g5_digital_fault_recorder: Inconsistent Interpretation of HTTP Requests
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur in the HTTP header parsing mechanism.
- 9.8 Critical severity
g5_digital_fault_recorder: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur during XML body parsing.
- 7.5 High severity
g5_digital_fault_recorder: Path Traversal: '../filedir'
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal can occur via the system logs download mechanism.
- 8.8 High severity
g5_digital_fault_recorder: Improper Handling of Insufficient Permissions or Privileges
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authentica