CVE-2024-22084

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Cleartext passwords and hashes are exposed through log files.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-220856.2An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable.CVE-2024-220869.8handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code executio CVE-2024-220879.8route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code e CVE-2024-220889.8Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishand CVE-2024-22096.3A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmwar CVE-2024-220916.5Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includ CVE-2024-220927.4in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user CVE-2024-220938.7When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on m CVE-2024-220957.2Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R) Server D50DNP Family products may allow a pri CVE-2024-220966.5In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when u CVE-2024-220979.8A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) CVE-2024-220988.8in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.