« Volver al listado

CVE-2012-2607

Estado: ModificadaAlta (7.5)—

El controlador Johnson Controls CK721-A con el firmware anterior a vSSM4388_03.1.0.14_BB permite a atacantes remotos ejecutar acciones arbitrarias a través de paquetes especiales para el puerto TCP 41014 (también conocido como el puerto de descarga).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Johnsoncontrols — Network ControllerJohnsoncontrols — Network Controller Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2607",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-16T20:49:19.567",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/977312",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/MORO-8UYN8P",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/977312",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/MORO-8UYN8P",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port)."
    },
    {
      "lang": "es",
      "value": "El controlador Johnson Controls CK721-A con el firmware anterior a vSSM4388_03.1.0.14_BB permite a atacantes remotos ejecutar acciones arbitrarias a través de paquetes especiales para el puerto TCP 41014 (también conocido como el puerto de descarga)."
    }
  ],
  "lastModified": "2026-06-16T23:41:45.530",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:johnsoncontrols:network_controller:ck721-a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFFF0663-EB44-4520-B9FD-95BB97A03980"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:johnsoncontrols:network_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28B5EC8D-AC55-42A6-82B3-433E8DE06995",
              "versionEndIncluding": "03.1.0.14"
            },
            {
              "criteria": "cpe:2.3:o:johnsoncontrols:network_controller_firmware:03.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4FB2BF4-EFDB-4448-AB5D-014DAEBAFD60"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}