Malwarecritical
CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12248 | Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order… | 9.3 | 1% | ||
| CVE-2025-0626 | The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings… | 7.7 | 1% | ||
| CVE-2025-0683 | In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is… | 8.2 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 202.114.4.119 | ecure/vulnerable design," and that the static IP addresses (202.114.4.119 and 202.114.4.120) in question are listed in their manuals. |
| ipv4 | 202.114.4.120 | esign," and that the static IP addresses (202.114.4.119 and 202.114.4.120) in question are listed in their manuals. "The CONTEC Opera |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Jan 31, 2025 Vulnerability / Healthcare The U. S. Cybersecurity and Infrastructure Security Agency (CISA) and the Food and Drug Administration (FDA) have issued alerts about the presence of hidden functionality in Contec CMS8000 patient monitors and Epsimed MN-120 patient monitors.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.