EUVD-2012-2593

Malware in sbrugna...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

Design/Logic Flaw

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

CVE-2012-2607 affects the Johnson Controls CK721-A controller (firmware before SSM4388_03.1.0.14_BB). It allows remote attackers to perform arbitrary actions by sending crafted packets to TCP port 41014 (the download port). CERT/NVD entries describe remote command execution potential. Remediation...

CVE-2012-2607: Improper Neutralization of Special Elements used in an OS Command

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

Johnson Controls CK721-A and P2000 remote command execution vulnerability

Overview Johnson Controls CK721-A and P2000 products contain a remote command execution vulnerability which may allow an unauthenticated remote attacker to perform various tasks against the devices. Description The "download" port tcp/41014 on the CK721-A device is vulnerable to remote command...