CVE-2012-2607: OS Command Injection
The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2607?
CVE-2012-2607 is considered to be of high severity due to the potential for remote attackers to execute arbitrary actions.
How do I fix CVE-2012-2607?
To fix CVE-2012-2607, update the firmware of the Johnson Controls CK721-A controller to version SSM4388_03.1.0.14 or later.
What systems are affected by CVE-2012-2607?
CVE-2012-2607 affects the Johnson Controls CK721-A controller with firmware versions prior to SSM4388_03.1.0.14.
Can CVE-2012-2607 be exploited remotely?
Yes, CVE-2012-2607 can be exploited remotely via crafted packets sent to TCP port 41014.
What type of attacks can occur due to CVE-2012-2607?
CVE-2012-2607 enables attackers to perform arbitrary actions on the affected device, which may lead to further exploitation.