EUVD-2012-2593

Malware in sbrugna...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

Design/Logic Flaw

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

CVE-2012-2607 affects the Johnson Controls CK721-A controller (firmware before SSM4388_03.1.0.14_BB). It allows remote attackers to perform arbitrary actions by sending crafted packets to TCP port 41014 (the download port). CERT/NVD entries describe remote command execution potential. Remediation...

CVE-2012-2607: Improper Neutralization of Special Elements used in an OS Command

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

PT-2012-4133

Name of the Vulnerable Software and Affected Versions Johnson Controls CK721-A controller versions prior to SSM4388 03.1.0.14 BB Description The issue allows remote attackers to perform arbitrary actions via crafted packets to the TCP port 41014, also known as the download port. Recommendations F...

Johnson Controls CK721-A and P2000 remote command execution vulnerability

Overview Johnson Controls CK721-A and P2000 products contain a remote command execution vulnerability which may allow an unauthenticated remote attacker to perform various tasks against the devices. Description The "download" port tcp/41014 on the CK721-A device is vulnerable to remote command...