CVE-2024-46602

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-01-07

Last modified

2025-01-09

Weaknesses

CWE-611

Affected products

• G5dfr Firmware (Elspec-ltd)

References

• https://www.elspec-ltd.com/support/security-advisories.