PT-2025-1945 · Nedap · Nedap Librix Ecoreader

Prajitesh Singh · Published 2025-01-07 · Updated 2025-01-17 · CVE-2024-12757

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Nedap Librix Ecoreader (affected versions not specified)

Description The issue is related to missing authentication for critical functions in the software, which could allow an unauthenticated attacker to potentially execute malicious code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-12757

Affected Products

Nedap Librix Ecoreader

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-12757 · Security Note
• https://twitter.com/windowsforum/status/1876684160426729815 · Twitter Post
• https://twitter.com/CVEnew/status/1880384722930442374 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-007-02 · Note
• https://t.me/cvedetector/15722 · Telegram Post