CVE-2024-12013 | Nozomi Networks Labs

Summary

A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials.

Impact

A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.

Issue Date

February 17, 2025

Affects

This issue affects: Zettler 130.8005 version 12h.

CVE Name

CVE-2024-12013

CVSS Details

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

CVSS Score

7.6

Solution

It is recommended to segregate the host to a management VLAN where only authorized clients have the ability to interact with it.

Mitigations

Acknowledgements

Diego Zaffaroni of Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more