CVE-2024-46602

Published Jan 7, 2025

Last updated 2 months ago

Overview

Description: An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload.
Source: cve@mitre.org
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-611

Hype score: Not currently trending

CVE-2024-46602 An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a … https://t.co/EN9MjP7BeZ
@CVEnew
8 Jan 2025
519 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes

References