CVE-2012-4026

Published: Jul 16, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 (aka the upload port), a different vulnerability than CVE-2012-2607.

Affected (2)

Products: Johnsoncontrols: Pegasys P2000 Server Software, Pegasys P2000 Server

Johnsoncontrols

2 products

Pegasys P2000 Server Software

Pegasys P2000 Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Johnsoncontrols Pegasys P2000 Server Software	Up to 3.10
Johnsoncontrols Pegasys P2000 Server	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.kb.cert.org/vuls/id/977312

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/MORO-8UYN8P

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/977312

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/MORO-8UYN8P

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.