TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrati…

published 2013-05-23 13 y ago modified 2026-06-16 4 mo ago also EUVD-2012-4622

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.3%; EPSS 2.3% chance of exploitation in 30 days, percentile 83%
public exploits: 0; none known

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-13-136-01 updated 2025-06-06 cvss 10.0

TURCK BL20 and BL67 Programmable Gateway Hard-Coded User Accounts

TURCK BL20 Programmable Gateway TURCK BL67 Programmable Gateway
affected: mitigation “BL67 (www.turck-usa.com/Search/Documentation_Search_Results.asp?ViewID=Illustrations&Page=1&SearchIn=0&SortBy=&SortDesc=&Pattern=BL67-PG-EN-IP)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

2.25% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-255 Credentials Management Errors

References

ics-cert.us-cert.gov /advisories/ICSA-13-136-01
us-government-resource

Sources

CVE List CVE-2012-4697
NVD CVE-2012-4697

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary