What is CVE-2024-12012?

CVE-2024-12012 is a medium-severity vulnerability in Zettler 130.8005, classified under CWE-598. CVSS score: 5.7/10. Published 2025-02-13.

How severe is CVE-2024-12012?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Zettler 130.8005

CVE-2024-12012

A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of…

EPSS: 0.004 (27.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Zettler 130.8005 — versions 12h

Weakness classification (CWE)

CWE-598

References

prodsec@nozominetworks.com

Frequently asked questions

What is CVE-2024-12012?: CVE-2024-12012 is a medium-severity vulnerability in Zettler 130.8005, classified under CWE-598. CVSS score: 5.7/10. Published 2025-02-13.
How severe is CVE-2024-12012?: Medium severity. CVSS v3 base score is 5.7 out of 10.