Zettler TCP/IP Gateway Buffer Over-read Vulnerability Allowing Authentication Token Leakage

A buffer over-read vulnerability has been identified in the Zettler 130.8005 TCP/IP Gateway, specifically in devices running firmware version 12h. This vulnerability allows remote, unauthenticated attackers to exploit a memory leak in the web server, leading to the unauthorized disclosure of valid authentication tokens from the process memory of users currently logged into the system. As a result, attackers can bypass the authentication mechanism.

Impact

Exploitation of this vulnerability allows for the leakage of authentication tokens, which can be used to impersonate logged-in users and bypass authentication requirements.

Remediation

It is recommended to segregate the host to a management VLAN where only authorized clients can interact with it.