Vulnerability · Published Feb 19, 2021 · Assigned by jci
CVE-2020-9050Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
High 7.5
In plain English
A high-severity security flaw in Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 from Johnson Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.8%top 10.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Johnson Controls | Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 | 2.02.1 |
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories x_refsource_CONFIRM
- ICS-CERT Advisory third-party-advisory, x_refsource_CERT