PT-2025-6512 · Zettlr · Zettler 130.8005 Tcp/Ip Gateway

Diego Zaffaroni · Published 2025-02-13 · Updated 2025-02-17 · CVE-2024-12011

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Zettler 130.8005 TCP/IP Gateway version 12h

Description A buffer over-read issue was discovered, affecting the web server and allowing information disclosure. This can be triggered by leveraging a memory leak, enabling a remote unauthenticated attacker to exploit the issue and leak valid authentication tokens from the process memory associated with currently logged-in users, thereby bypassing the authentication mechanism.

Recommendations For Zettler 130.8005 TCP/IP Gateway version 12h, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2024-12011

Affected Products

Zettler 130.8005 Tcp/Ip Gateway

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-12011 · Security Note
• https://twitter.com/cybercronai/status/1891412897877655894 · Twitter Post
• https://twitter.com/CVEnew/status/1890150869435613297 · Twitter Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011 · Note
• https://twitter.com/WolfgangSesin/status/1890085581582946806 · Twitter Post