An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be abused be an attacker get a better understanding of the operating system.
The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.
Link | Tags |
---|---|
https://www.elspec-ltd.com/support/security-advisories/ | vendor advisory |