Skip to content
OpenAdvisories
Medium ICSA-18-212-02 1 CVE

Johnson Controls Metasys and BCPro

Published Jul 31, 2018 · Updated Jul 31, 2018

Vendor: Johnson Controls Product: BCPro (BCM) Product: Metasys System

Summary

Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the Metasys or BCPro server, allowing an attacker to target a system for attack.

Vulnerabilities 1

  • Medium 4.3
    CVE-2018-10624

    Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information

    In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical info…

    Johnson Controls BCPro (BCM) Metasys System

Revision history

  1. #1

    ICSA-18-212-02 Johnson Controls Metasys and BCPro

References