What’s Vulnerable › Vulnerabilities

CVE-2012-2607

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-16 · updated 2026-06-16
• Weakness: CWE-78

Description

The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).

Affected products

• Johnsoncontrols Network Controller: ck721-a
• Johnsoncontrols Network Controller Firmware: through 03.1.0.14; 03.0

References

• http://www.kb.cert.org/vuls/id/977312
• http://www.kb.cert.org/vuls/id/MORO-8UYN8P
• http://www.kb.cert.org/vuls/id/977312
• http://www.kb.cert.org/vuls/id/MORO-8UYN8P

Get alerted when CVE-2012-2607 or the next vulnerability affects your stack