Design/Logic Flaw

2018-08-0121:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.

CPENameOperatorVersion
bcprolt3.0.2
metasys_systemle8.0

CPE	Name	Operator	Version
	bcpro	lt	3.0.2
	metasys_system	le	8.0

References

www.securityfocus.com/bid/104937

ics-cert.us-cert.gov/advisories/ICSA-18-212-02