Vulnerabilities > CVE-2024-12136 - Missing Critical Step in Authentication vulnerability in Elfatek Anka Jpd00028 Firmware

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
elfatek
CWE-304

Summary

Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: through 19.03.2025. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

Vulnerable Configurations

Part Description Count
OS
Elfatek
1
Hardware
Elfatek
1

Common Weakness Enumeration (CWE)