What’s Vulnerable › Vulnerabilities

CVE-2012-4697

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-05-23 · updated 2026-06-16
• Weakness: CWE-255

Description

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

Affected products

• TURCK Bl20 Programmable Gateway: all versions
• TURCK Bl20 Programmable Gateway Firmware: all versions
• TURCK Bl67 Programmable Gateway: all versions
• TURCK Bl67 Programmable Gateway Firmware: all versions

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01
• http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01

Get alerted when CVE-2012-4697 or the next vulnerability affects your stack