Permissions, Privileges, and Access Controls in G5 digital fault recorder - CVE-2024-22078

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU87695

Permissions, Privileges, and Access Controls in G5 digital fault recorder - CVE-2024-22078

Published: March 21, 2024


Vulnerability identifier: #VU87695
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-22078
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to weak filesystem permissions in network configuration script, which leads to security restrictions bypass and privilege escalation.


Affected software

G5 digital fault recorder

How to mitigate CVE-2024-22078

Install updates from vendor's website.

G5 digital fault recorder - update to 1.2.1.12

External References

Related Security Bulletins