Vendors / Elspec-ltd Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 7
Exploited now Elspec-ltd records in CISA KEV No Elspec-ltd vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00785 · Published 2024-03-20 · No fix listed CWE-444
Priority MEDIUM 50
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00785 · Published 2024-03-20 · No fix listed CWE-119
Priority MEDIUM 41
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01016 · Published 2024-03-20 · No fix listed CWE-24
Priority MEDIUM 41
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00642 · Published 2024-03-20 · No fix listed CWE-280
Priority MEDIUM 40
An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00725 · Published 2025-01-07 · No fix listed CWE-611
Priority MEDIUM 40
An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00725 · Published 2025-01-07 · No fix listed CWE-611
Priority MEDIUM 40
Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00697 · Published 2025-01-07 · No fix listed CWE-120
Priority MEDIUM 40
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00633 · Published 2024-03-20 · No fix listed CWE-548
Priority LOW 39
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00393 · Published 2024-03-20 · No fix listed CWE-312
Priority LOW 31
On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset string) into a USB port.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00219 · Published 2025-11-06 · No fix listed CWE-288
Priority LOW 31
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00482 · Published 2024-03-20 · No fix listed CWE-280
Priority LOW 30
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-03-20 · No fix listed CWE-798
Priority LOW 27
An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00228 · Published 2024-03-20 · No fix listed CWE-276
Open these records in search → All records by CVSS severity
2 7 4 0 0
THREATIST.IORead the docs