{"id":"CVE-2024-12011","state":"PUBLISHED","title":"A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory l","description":"A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.","publishedAt":"2025-02-13T15:59:23.264Z","updatedAt":"2025-02-13T16:54:02.337Z","severity":{"score":7.6,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","source":"Nozomi"},"assigner":"Nozomi","products":["Zettler 130.8005"],"affected":[{"vendor":"Zettler","product":"130.8005","defaultStatus":"unaffected","versions":[{"version":"12h","status":"affected","versionType":"semver"}]}],"references":["https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011"],"weaknesses":["CWE-126"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/12xxx/CVE-2024-12011.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-12011","state":"PUBLISHED","datePublished":"2025-02-13T15:59:23.264Z","dateUpdated":"2025-02-13T16:54:02.337Z","assignerShortName":"Nozomi","assignerOrgId":"bec8025f-a851-46e5-b3a3-058e6b0aa23c","dateReserved":"2024-12-02T10:29:12.318Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism."}],"affected":[{"vendor":"Zettler","product":"130.8005","defaultStatus":"unaffected","versions":[{"version":"12h","status":"affected","versionType":"semver"}]}],"references":[{"url":"https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-126","description":"CWE-126 Buffer Over-read","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Nozomi","orgId":"bec8025f-a851-46e5-b3a3-058e6b0aa23c","dateUpdated":"2025-02-13T16:10:33.618Z"},"credits":[{"lang":"en","type":"finder","value":"Diego Zaffaroni of Nozomi Networks found this bug during a security research activity."}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-13T16:53:53.590868Z","id":"CVE-2024-12011","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-13T16:54:02.337Z"}}]}}}