Security Advisory
CVE-2012-2607
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).