High severity7.5NVD Advisory· Published Feb 19, 2021· Updated Jun 17, 2026

CVE-2020-9050

Description

Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/Metasys Reporting Enginellm-create
Johnson Controls/Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1v5
Range: 2.0

Patches

Vulnerability mechanics

References

www.johnsoncontrols.com/cyber-solutions/security-advisoriesnvdVendor Advisory
www.us-cert.gov/ics/advisories/icsa-21-049-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000