« Volver al listado

CVE-2012-4697

Estado: ModificadaAlta (10)—

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Turck — Bl20 Programmable GatewayTurck — Bl20 Programmable Gateway FirmwareTurck — Bl67 Programmable GatewayTurck — Bl67 Programmable Gateway Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4697",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-05-23T17:55:02.870",
  "references": [
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session."
    },
    {
      "lang": "es",
      "value": "TURCK BL20 Programmable Gateway and BL67 Programmable Gateway han codificada cuentas, lo que permite a atacantes remotos obtener acceso administrativo a través de una sesión de FTP."
    }
  ],
  "lastModified": "2026-06-16T23:45:35.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:turck:bl20_programmable_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "231F0152-4197-480C-BD5E-EFD774D2B5D3"
            },
            {
              "criteria": "cpe:2.3:h:turck:bl67_programmable_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C59B80-311E-4B9F-BB58-85C8FC381835"
            },
            {
              "criteria": "cpe:2.3:o:turck:bl20_programmable_gateway_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57B420D0-F8C3-4D03-A734-C33BB68CC7FF"
            },
            {
              "criteria": "cpe:2.3:o:turck:bl67_programmable_gateway_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4BD4ECA-9609-409F-8909-6CFC6AD4EF9C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}