CVE-2024-12137
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Mar 19, 2025
CWE ID 294
Summary
CVE-2024-12137 is a newly disclosed vulnerability affecting Elfatek Elektronics ANKA JPD-00028 devices. This Authentication Bypass by Capture-replay issue enables session hijacking, allowing unauthorized access to affected systems. The affected devices have a known vulnerability through March 2025. Notably, the vendor has yet to announce a fix for this issue, and the CVE status will be updated when more information becomes available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.