medium6.5
CVE-2024-22083
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
Impact
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elspec-Ltd | G5dfr Firmware | before 1.2.1.12 |