CVE-2024-12013 – Fortinet TCP/IP Gateway Default Credentials Disclosure

The following table lists the changes that have been made to the
CVE-2024-12013 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Feb. 13, 2025

    Action Type Old Value New Value
    Added Description A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
    Added CWE CWE-1392
    Added Reference https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12013
Share the Post:

Related Posts