Description (CNA)
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / Metasys System | affected 0 through 8.0; unaffected 9.0 |
| Johnson Controls / BCPro (BCM) | affected 0 before 3.0.2; unaffected 3.0.2 |
CWE
CWE-209
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-18-212-02
- http://www.securityfocus.com/bid/104937
ADP enrichment
No English description supplied.