TURCK vulnerabilities

Products

• bl20 programmable gateway 1
• bl20 programmable gateway firmware 1
• bl67 programmable gateway 1
• bl67 programmable gateway firmware 1
• TBEN-L4-SE-M2 1
• TBEN-L5-SE-M2 1
• TBEN-LL-SE-M2 1

Latest TURCK CVEs

Newest publication first

1. CVE-2026-5416 Command Injection via name parameter

   Published 2026-06-16

   High·CVSS 8.7 EPSS 0.77%

   Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.

2. CVE-2012-4697 TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

   Published 2013-05-23

   High·CVSS 10.0 EPSS 2.3%

   TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.