Elfatek Elektronics ANKA JPD-00028 Authentication Bypass Vulnerability Allowing Session Hijacking

A vulnerability allowing authentication bypass through capture-replay attacks has been identified in Elfatek Elektronics ANKA JPD-00028, affecting versions through 19.03.2025. This vulnerability allows session hijacking, enabling attackers to take over user sessions.

Impact

Exploitation of this vulnerability could lead to session hijacking, allowing attackers to impersonate users and potentially gain unauthorized access to sensitive information or functionalities.

Remediation

The vendor has not yet addressed this vulnerability. Users are advised to consider using alternative software.