CVE-2024-46601

CVE-2024-46601 is a buffer overflow vulnerability (CWE-120) affecting Elspec Engineering G5 Digital Fault Recorder Firmware version 1.2.1.12. The issue was publicly disclosed on January 7, 2025, and carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to its potential for denial-of-service impacts.

An unauthenticated attacker with network access can exploit this vulnerability remotely with low complexity and without requiring user interaction. Successful exploitation triggers a buffer overflow, leading to high-impact availability disruption, such as device crashes or reboots, while confidentiality and integrity remain unaffected.

For mitigation details, refer to the vendor's security advisory at https://www.elspec-ltd.com/support/security-advisories/.