CVE-2012-4697

Published: May 23, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

Affected (4)

Products: Turck: Bl20 Programmable Gateway, Bl20 Programmable Gateway Firmware, Bl67 Programmable Gateway, Bl67 Programmable Gateway Firmware

Turck

4 products

Bl20 Programmable Gateway

Bl20 Programmable Gateway Firmware

Bl67 Programmable Gateway

Bl67 Programmable Gateway Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Turck Bl20 Programmable Gateway	All versions
Turck Bl20 Programmable Gateway Firmware	All versions
Turck Bl67 Programmable Gateway	All versions
Turck Bl67 Programmable Gateway Firmware	All versions

Related CWEs

CWE-255

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.