CVE-2024-12013

Zettler / 130.8005 PUBLISHED

Description (CNA)

A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.

Affected (CNA)

Vendor / product	Versions
Zettler / 130.8005	affected 12h

CWE

CWE-1392

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.