medium4.3
CVE-2018-10624
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling …
Impact
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Johnsoncontrols | Bcpro | before 3.0.2 |
| Johnsoncontrols | Metasys System | through 8.0 |