CVE-2024-46603: Elspec-Ltd g5dfr Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload.

Affected products

• Elspec-Ltd g5dfr Firmware: before 1.2.2.19 (fixed in 1.2.2.19)

Published 2025-01-07. Last modified 2026-06-17.