CVE-2024-12011

Katalog CVE

CVSS 7.6 · High EPSS 0,40%

Kerentanan Buffer Over-read. Skor CVSS 3.1 7.6 (High) menurut nozominetworks.com.

Deskripsi (NVD)

A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.

Rincian

Terbit di NVD

13 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.6 (High), sumber nozominetworks.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-126: Buffer Over-read

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,9% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011