Vulnerability Details CVE-2012-2607
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.9%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2012-2607
-
cpe:2.3:h:johnsoncontrols:network_controller:ck721-a
-
cpe:2.3:o:johnsoncontrols:network_controller_firmware:*
-
cpe:2.3:o:johnsoncontrols:network_controller_firmware:03.0