PT-2012-4133
CVE-2012-2607
·
تاريخ النشر
2012-07-16
·
تاريخ التحديث
2012-07-17
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Johnson Controls CK721-A controller versions prior to SSM4388 03.1.0.14 BB
Description
The issue allows remote attackers to perform arbitrary actions via crafted packets to the TCP port 41014, also known as the download port.
Recommendations
For versions prior to SSM4388 03.1.0.14 BB, update the firmware to SSM4388 03.1.0.14 BB or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 41014 to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾