CVE-2012-4026: The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger fals...

Security readout for executives and security teams

This CVE affects Johnson Controls Pegasys P2000 server software before 3.11. A remote attacker could send crafted network traffic to the upload port and cause false alerts. The main business risk is disruption or confusion in physical-security monitoring, not confirmed data theft or system takeover from the provided sources. Exposure is likely limited to organizations running Johnson Controls Pegasys P2000 server software before 3.11 with TCP port 41013 reachable by untrusted networks. The provided affected-products metadata is incomplete, so asset validation is required. Treat this as a targeted operational-security concern if Pegasys P2000 is deployed. Prioritize confirming version and network exposure, because false physical-security alerts can disrupt response teams even without evidence of active exploitation. Mitigation focus: Identify any Pegasys P2000 server deployments and software versions.; Confirm whether deployed software is before 3.11.; Check Johnson Controls and CERT guidance for supported remediation..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.