ICSMA-18-277-02

Change Healthcare PeerVue Web Server

view advisory published 2018-10-04

Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the PeerVue Web Server, allowing an attacker to target a system for attack.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-10624US	medium6.5	0.88% (59th)	—	2018-08-01
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communi…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSMA-18-277-02 JSONself
ICS Advisory ICSMA-18-277-02 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (1)

FixedPeerVue Web Server
Change Healthcare has been very responsive and aggressive in their efforts to mitigate the issue and released a patch to remediate the reported vulnerability. Users should contact the Change Healthcare Supportteam for information regarding the patch.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan