The vulnerability CVE-2024-12137 in Elfatek Elektronics ANKA JPD-00028 involves an authentication bypass through capture-replay techniques, classified under CWE-294 (Improper Authentication). This allows an attacker to hijack sessions by replaying captured authentication data. The affected product versions are those prior to V.01.01. The CVSS 3.1 base score is 7.6, reflecting low attack complexity but significant impact on integrity and availability. No official patch or remediation level has been published by the vendor, and no known exploits have been reported.

Successful exploitation of this vulnerability can lead to session hijacking, allowing an attacker to bypass authentication controls. This can result in unauthorized access with potential high impact on the integrity and availability of the affected system. Confidentiality impact is rated low, but integrity and availability impacts are high according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting network exposure of the affected device and monitor for suspicious activity. No vendor-provided mitigation or temporary fix is currently documented.