What is CVE-2024-12011?

CVE-2024-12011 is a high-severity vulnerability in Zettler 130.8005, classified under Buffer Over-read. CVSS score: 7.6/10. Published 2025-02-13.

How severe is CVE-2024-12011?

High severity. CVSS v3 base score is 7.6 out of 10.

Vulnerability in Zettler 130.8005

CVE-2024-12011

A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L.

Affected products

Zettler 130.8005 — versions 12h

Weakness classification (CWE)

CWE-126 — Buffer Over-read

References

prodsec@nozominetworks.com

Frequently asked questions

What is CVE-2024-12011?: CVE-2024-12011 is a high-severity vulnerability in Zettler 130.8005, classified under Buffer Over-read. CVSS score: 7.6/10. Published 2025-02-13.
How severe is CVE-2024-12011?: High severity. CVSS v3 base score is 7.6 out of 10.