Malwarecritical
FDA, CISA warn of backdoor in popular patient monitor used by US hospitals
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12248 | Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order… | 9.3 | 1% | ||
| CVE-2025-0626 | The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings… | 7.7 | 1% | ||
| CVE-2025-0683 | In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is… | 8.2 | <1% |
From the original article
3 min read at therecord.media
Federal agencies are warning hospitals of a backdoor discovered in a popular line of patient monitors sold by Chinese company Contec.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.