CVE-2018-10624

Description

In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-212-02

http://www.securityfocus.com/bid/104937

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3