PT-2025-6512 · Zettlr · Zettler 130.8005 Tcp/Ip Gateway

Diego Zaffaroni · Publicado 2025-02-13 · Atualizado 2025-02-17 · CVE-2024-12011

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Zettler 130.8005 TCP/IP Gateway version 12h

Description A buffer over-read issue was discovered, affecting the web server and allowing information disclosure. This can be triggered by leveraging a memory leak, enabling a remote unauthenticated attacker to exploit the issue and leak valid authentication tokens from the process memory associated with currently logged-in users, thereby bypassing the authentication mechanism.

Recommendations For Zettler 130.8005 TCP/IP Gateway version 12h, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Enumeração de Fraquezas

CWE-126

Identificadores relacionados

CVE-2024-12011

Produtos afetados

Zettler 130.8005 Tcp/Ip Gateway

Referências · 5

• https://twitter.com/cybercronai/status/1891412897877655894 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1890150869435613297 · Publicação no Twitter
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011 · Nota
• https://twitter.com/WolfgangSesin/status/1890085581582946806 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-12011 · Nota de Segurança