CVE-2024-22078

CVE-2024-22078 is a privilege escalation vulnerability affecting Elspec G5 digital fault recorder versions 1.1.4.15 and earlier. It stems from weak filesystem permissions on the network configuration script, allowing all authenticated users write access. This flaw enables an authenticated attacker to escalate their privileges to administrative levels. The vulnerability carries a high CVSS score of 8.8, indicating a significant risk. It can be exploited remotely over the network with low attack complexity and no user interaction, potentially leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of reported vulnerabilities.