PT-2013-1698 · Turck · Turck Bl20 Programmable Gateway+1

Rubén Santamarta · Publicado 2013-05-23 · Atualizado 2013-06-24 · CVE-2012-4697

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TURCK BL20 Programmable Gateway (affected versions not specified) TURCK BL67 Programmable Gateway (affected versions not specified)

Description The issue allows remote attackers to obtain administrative access via an FTP session due to hardcoded accounts.

Recommendations For TURCK BL20 Programmable Gateway, change the hardcoded account credentials to unique and secure values. For TURCK BL67 Programmable Gateway, change the hardcoded account credentials to unique and secure values.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-4697

Produtos afetados

Turck Bl20 Programmable Gateway

Turck Bl67 Programmable Gateway

Referências · 2

• http://ics-cert.us-cert.gov/advisories/ICSA-13-136-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4697 · Nota de Segurança