TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bl20_programmable_gateway | Turck | - (including) | - (including) |
| Bl67_programmable_gateway | Turck | - (including) | - (including) |
| Bl20_programmable_gateway_firmware | Turck | - (including) | - (including) |
| Bl67_programmable_gateway_firmware | Turck | - (including) | - (including) |