CVE-2012-2607 The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| johnsoncontrols network controller | = ck721-a | No fix listed |
| johnsoncontrols network controller firmware | <= 03.1.0.14 | No fix listed |
| johnsoncontrols network controller firmware | = 03.0 | No fix listed |
References
- VU#977312 third-party-advisory us-government-resource
- www.kb.cert.org