CVE-2012-4697
Published May 23, 2013
Last updated 11 years ago
Overview
- Description
- TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-255
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:turck:bl20_programmable_gateway:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "231F0152-4197-480C-BD5E-EFD774D2B5D3"
},
{
"criteria": "cpe:2.3:h:turck:bl67_programmable_gateway:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1C59B80-311E-4B9F-BB58-85C8FC381835"
},
{
"criteria": "cpe:2.3:o:turck:bl20_programmable_gateway_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B420D0-F8C3-4D03-A734-C33BB68CC7FF"
},
{
"criteria": "cpe:2.3:o:turck:bl67_programmable_gateway_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4BD4ECA-9609-409F-8909-6CFC6AD4EF9C"
}
],
"operator": "OR"
}
]
}
]