What is the CVSS score of CVE-2012-4697?

CVE-2012-4697 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.6%.

Bl20 Programmable Gateway CVE-2012-4697

CRITICAL

Credentials Management Errors (CWE-255)

2013-05-23 ics-cert@hq.dhs.gov

Authentication Bypass Bl20 Programmable Gateway Bl67 Programmable Gateway Bl20 Programmable Gateway Firmware Bl67 Programmable Gateway Firmware

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 23, 2013 - 17:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.

AnalysisAI

TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-255. TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session. Affected products include: Turck Bl20 Programmable Gateway, Turck Bl67 Programmable Gateway, Turck Bl20 Programmable Gateway Firmware, Turck Bl67 Programmable Gateway Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.