CVE-2012-2607: Improper Neutralization of Special Elements used in an OS Command

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...