Unscored severity · published Jul 16, 2012
CVE-2012-2607
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Network Controller · Johnsoncontrols
ck721-a · source: NVD
NC
Network Controller Firmware · Johnsoncontrols
through 03.1.0.14; 03.0 · source: NVD