CVE-2024-46602

Name of the Vulnerable Software and Affected Versions: Elspec G5 digital fault recorder versions 1.2.1.12 and earlier

Description: An issue was discovered that may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload due to an XML External Entity (XXE) vulnerability.

Recommendations: For versions 1.2.1.12 and earlier, as a temporary workaround, consider disabling the processing of external XML entities until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.