CVE-2024-12510

—

CVSS 3.1

6.7 medium

EPSS

<1%p59

Published

Feb 3, 2025 (Feb 3, 2025)

Modified

Jun 17, 2026

Description

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news3 stories

⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple’s Data Dilemma

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Data breach CVE-2018-0171 CVE-2025-24989 CVE-2025-23209+32 CVEs

Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers

Security AffairsFeb 18, 08:49 UTC · Feb 18, 2025Vulnerability CVE-2024-12511 CVE-2024-12510

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

The Hacker NewsFeb 18, 07:17 UTC · Feb 18, 2025Vulnerability CVE-2024-12510 CVE-2024-12511 CVE-2024-56735