CVE-2018-10624
Last modified
CVE-2018-10624 is a vulnerability of currently unknown severity. In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Johnsoncontrols | Bcpro | < 3.0.2 |
| Johnsoncontrols | Metasys System | <= 8.0 |
References
- http://www.securityfocus.com/bid/104937Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-212-02Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/104937Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-212-02Mitigation, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-10624?
How severe is CVE-2018-10624?
How do I fix CVE-2018-10624?
Are you affected by CVE-2018-10624?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST