TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to obtain administrative access via an FTP session.Referenceshttp://ics-cert.us-cert.gov/advisories/ICSA-13-136-01