CVE-2012-2606
Bradford Network Sentry <5.3.3 - Info Disclosure
Title source: llmDescription
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.
Scores
EPSS
0.0580
EPSS Percentile
90.4%
Classification
CWE
CWE-287
Status
draft
Affected Products (3)
bradfordnetworks/network_sentry_appliance_software
< 5.3
bradfordnetworks/network_sentry_appliance
bradfordnetworks/network_sentry_appliance
Timeline
Published
Jun 13, 2012
Tracked Since
Feb 18, 2026