Permissions, Privileges, and Access Controls in G5 digital fault recorder - CVE-2024-22077
Published: March 21, 2024
Vulnerability identifier: #VU87701
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-22077
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to weak permissions in SQLite database file, which leads to security restrictions bypass and privilege escalation.
Affected software
G5 digital fault recorder
How to mitigate CVE-2024-22077
Install updates from vendor's website.
G5 digital fault recorder - update to 1.2.1.12