What’s Vulnerable › Vulnerabilities

CVE-2012-2606

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-06-13 · updated 2026-06-16
• Weakness: CWE-287

Description

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.

Affected products

• Bradfordnetworks Network Sentry Appliance: ns500rx, ns500x
• Bradfordnetworks Network Sentry Appliance Software: through 5.3

References

• http://www.kb.cert.org/vuls/id/709939
• http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
• https://na3.salesforce.com/sfc/#version?id=06850000000JDx3
• http://www.kb.cert.org/vuls/id/709939
• http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
• https://na3.salesforce.com/sfc/#version?id=06850000000JDx3

Get alerted when CVE-2012-2606 or the next vulnerability affects your stack