CVE-2024-12137

Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking. This issue affects ANKA JPD-00028: before V.01.01...

CVE-2024-12137

creationtimestamp| type| source ---|---|--- 2025-03-19 08:49:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8035 2025-03-19 10:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysb6jwf2e 2025-03-19 12:08:27+00:00| seen| https://t.me/cvedetector/20629 2025-06-27...

CVE-2024-12137

CVE-2024-12137 concerns Elfatek Elektronics ANKA JPD-00028 (affected up to before V.01.01). The root cause is a capture-replay/authentication bypass enabling session hijacking. The issue is evaluated with CVSS v3.1: AV:A, AC:L, PR:N, UI:R, S:U, C:L, I:H, A:H, giving a base score of 7.6 (HIGH). Im...

CVE-2024-12137 Authentication Bypass in Elfatek Elektronics' ANKA JPD-00028

Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking. This issue affects ANKA JPD-00028: before V.01.01...