What is CVE-2024-12013?

CVE-2024-12013 is a high-severity vulnerability in Zettler 130.8005, classified under CWE-1392. CVSS score: 7.6/10. Published 2025-02-13.

How severe is CVE-2024-12013?

High severity. CVSS v3 base score is 7.6 out of 10.

Vulnerability in Zettler 130.8005

CVE-2024-12013

A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.

EPSS: 0.003 (25.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L.

Affected products

Zettler 130.8005 — versions 12h

Weakness classification (CWE)

CWE-1392

References

prodsec@nozominetworks.com

Frequently asked questions

What is CVE-2024-12013?: CVE-2024-12013 is a high-severity vulnerability in Zettler 130.8005, classified under CWE-1392. CVSS score: 7.6/10. Published 2025-02-13.
How severe is CVE-2024-12013?: High severity. CVSS v3 base score is 7.6 out of 10.