CVE-2012-4026

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-16 · updated 2026-06-16
Weakness: CWE-20

Description

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 (aka the upload port), a different vulnerability than CVE-2012-2607.

Affected products

Johnsoncontrols Pegasys P2000 Server: all versions
Johnsoncontrols Pegasys P2000 Server Software: through 3.10

References

http://www.kb.cert.org/vuls/id/977312
http://www.kb.cert.org/vuls/id/MORO-8UYN8P
http://www.kb.cert.org/vuls/id/977312
http://www.kb.cert.org/vuls/id/MORO-8UYN8P

Get alerted when CVE-2012-4026 or the next vulnerability affects your stack