CVE-2024-12011

Summary

CVE-2024-12011 is a newly identified buffer over-read vulnerability affecting the 130.8005 TCP/IP Gateway, specifically its firmware version 12h. This issue, classified as CWE-126, can be triggered through a memory leak in the web server. An unauthenticated remote attacker can exploit this vulnerability to leak valid authentication tokens from the process memory, effectively bypassing the authentication mechanism for currently logged-in users. This could lead to unauthorized access and potential data breaches. The implications of this vulnerability are significant, as it allows an attacker to gain unauthorized access to the system without needing valid credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.