CVE-2018-10624
01.08.2018, 21:29
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| johnsoncontrols | bcpro | 𝑥 < 3.0.2 |
| johnsoncontrols | metasys_system | 𝑥 ≤ 8.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration