CVE-2012-4697 TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

HighCVSS 10.0 EPSS 2.3%

Published: 2013-05-23 20:00
Updated: 2026-06-17 02:45
Exploit status: No public exploit known

Description

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

Affected products

Product	Affected versions	Fixed in
TURCK bl20 programmable gateway	All versions	No fix listed
TURCK bl67 programmable gateway	All versions	No fix listed
TURCK bl20 programmable gateway firmware	All versions	No fix listed
TURCK bl67 programmable gateway firmware	All versions	No fix listed

References

ics-cert.us-cert.gov us-government-resource

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.25% (percentile 83.2)
CWE: CWE-255

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.