Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7x54-8vhv-9frj

Опубликовано: 20 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to administrative privileges.

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to administrative privileges.

EPSS

Процентиль: 47%
0.00244
Низкий

8.8 High

CVSS3

Дефекты

CWE-280

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script has weak filesystem permissions. This results in write access for all authenticated users and the possibility to escalate from user privileges to administrative privileges.

EPSS

Процентиль: 47%
0.00244
Низкий

8.8 High

CVSS3

Дефекты

CWE-280