CVE-2024-12013
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:LCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2024-12013 is a high-severity Use of Default Credentials (CWE-1392) vulnerability in Nozominetworks (inferred from references). Its CVSS base score is 7.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Protocol or Service Impersonation (T1001.003); ranked at the 26th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to CM-6 (Configuration Settings) and IA-5 (Authenticator Management) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2024-12013 is a CWE-1392 vulnerability classified as "Use of Default Credentials" affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server protected by default and easy-to-guess admin credentials, enabling unauthorized access to sensitive resources.
A remote attacker capable of interacting with the exposed FTP server can exploit this issue by using the default credentials to gain access. Upon successful authentication, the attacker can modify configuration files exposed by the service, including those storing password hashes or network settings. The vulnerability carries a CVSS v3.1 base score of 7.6 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L), indicating high integrity impact potential with network accessibility and low complexity.
Mitigation guidance is available in the advisory from Nozomi Networks at https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12013.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-50535
Vulnerability Data
A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could…
more
gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V13.2.1
Mitigating Controls (NIST 800-53 r5) AI
Secure configuration settings establish baselines that prohibit default credentials on system components.
Authenticator management requires verification of identity and secure distribution of initial authenticators, directly stopping default credentials from being left in place.
Vulnerability scanning can discover default credentials after deployment but does not stop their introduction.
Account management processes include assignment and control of initial account credentials, reducing the chance defaults remain active.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Credential management processes directly require replacing or disabling default passwords and keys.
Authentication policies can enforce non-default credential strength but do not explicitly address initial deployment defaults.
Hardened baselines and configuration management explicitly prohibit default credentials on deployed systems.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
The requirement to replace vendor default authentication information immediately after installation directly counters the use of default credentials that attackers commonly target.