CVE-2024-12013 Hardcoded credentials in 130.8005
Remote attackers can use default FTP credentials to access the gateway, modify configuration files, and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-12013?
CVE-2024-12013 is a high-severity vulnerability in Zettler 130.8005, published on 13 Feb 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.
Weakness: CWE-1392
Which versions are affected by CVE-2024-12013?
How do I fix CVE-2024-12013?
No fix has been published for CVE-2024-12013 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-12013 being exploited?
There is no known exploitation of CVE-2024-12013 in the wild and no public exploit code.
Sources
Also known as GHSA-g5g3-whp3-mmvg.