VULNERABILITY INTELLIGENCE

CVE-2012-2606

CVSS score5 MEDIUM
EPSS probability2.07%
CISA KEVNot currently listed
Published2012-06-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.

Weakness classification

  • CWE-287: Improper Authentication

Primary references