PT-2012-4133
CVE-2012-2607
·
Publicado
2012-07-16
·
Atualizado
2012-07-17
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Johnson Controls CK721-A controller versions prior to SSM4388 03.1.0.14 BB
Description
The issue allows remote attackers to perform arbitrary actions via crafted packets to the TCP port 41014, also known as the download port.
Recommendations
For versions prior to SSM4388 03.1.0.14 BB, update the firmware to SSM4388 03.1.0.14 BB or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 41014 to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾