- Description
- A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.
- Source
- prodsec@nozominetworks.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 7.6
- Impact score
- 4.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
- Severity
- HIGH
- prodsec@nozominetworks.com
- CWE-126
- Hype score
- Not currently trending
🚨 CVE-2024-12011 🔴 HIGH (7.6) 🏢 Zettler - 130.8005 🏗️ 12h 🔗 https://t.co/CYaMfLBBzB #CyberCron #VulnAlert https://t.co/wo1CZWNafS
@cybercronai
17 Feb 2025
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
New post from https://t.co/uXvPWJy6tj (CVE-2024-12011 | Nozomi Zettler 12h buffer over-read) has been published on https://t.co/I91n0SCuc2
@WolfgangSesin
13 Feb 2025
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes