Aleksey Usanov

**Name of the Vulnerable Software and Affected Versions** Elfatek Elektronics ANKA JPD-00028 versions through 19.03.2025 **Description** The issue is related to a Missing Critical Step in Authentication, which allows Authentication Bypass. The vendor has not informed about the completion of the fixing process within the specified time. **Recommendations** For ANKA JPD-00028 versions through 19.03.2025, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Elfatek Elektronics ANKA JPD-00028 versions through 19.03.2025 **Description** The issue is related to an authentication bypass by capture-replay vulnerability, which allows session hijacking. The vendor did not inform about the completion of the fixing process within the specified time. **Recommendations** For ANKA JPD-00028 versions through 19.03.2025, at the moment, there is no information about a newer version that contains a fix for this vulnerability.