CVE-2012-4697: TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote...

Security readout for executives and security teams

This CVE describes hardcoded accounts in TURCK BL20 and BL67 Programmable Gateways. If an attacker can reach the device FTP service, they may obtain administrative access. For executives, the concern is unauthorized control or configuration access to industrial gateway equipment, not broad enterprise software exposure. Exposure is likely limited to environments using TURCK BL20 or BL67 Programmable Gateways. Risk increases where FTP is enabled and reachable from corporate networks, remote access paths, vendor connections, or the internet. The provided affected-product metadata is incomplete. Treat as high priority for OT environments using the named TURCK gateways, especially if FTP is reachable beyond a tightly controlled management network. Prioritize inventory, exposure reduction, and vendor guidance review before assuming a patch or compensating control exists. Mitigation focus: Check TURCK and CISA advisory guidance for supported firmware or mitigation instructions.; Inventory BL20 and BL67 Programmable Gateways in OT and lab networks.; Restrict FTP access to required management hosts only..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.