CVE-2012-1288: The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administr...

Security readout for executives and security teams

A UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock reportedly contains hardcoded administrative credentials. If reachable over HTTP, an attacker could gain administrative access more easily. The source bundle does not provide CVSS scoring, affected versions, vendor fixes, or evidence of active exploitation. Exposure is most likely where this master clock device is deployed and its HTTP administration interface is reachable from untrusted networks. Confirm actual product presence because the structured affected-product data is incomplete. Prioritize if these devices support time synchronization for physical security, building systems, or operations and are reachable beyond a trusted management network. If not deployed, record as not applicable. Mitigation focus: Check CERT and vendor guidance for supported fixes or replacement options.; Remove public access to the HTTP administration interface.; Restrict management access to trusted administrative networks only..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.