CVE-2024-12013CWE-1392

A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h

High · published February 13, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.5th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-02-13T16:03Z
EPSS history
Timeline
  • 13 FEB 16:03Z
    A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h
    cvelistv5