NetSight
high7.5

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to T…

Impact

The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).

Affected products

VendorProductAffected versions
JohnsoncontrolsNetwork Controller
Version ck721-a
JohnsoncontrolsNetwork Controller Firmware
through 03.1.0.14
Version 03.0

Weakness classification

References