Medium severity6.5NVD Advisory· Published Aug 1, 2018· Updated Jun 17, 2026

CVE-2018-10624

Description

In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/BCPro (BCM)llm-fuzzy2 versions
<3.0.2+ 1 more
- (no CPE)range: <3.0.2
- (no CPE)range: 0
Johnson Controls/Metasysllm-fuzzy2 versions
<=8.0+ 1 more
- (no CPE)range: <=8.0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/104937nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-18-212-02nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000