Contec Health CMS8000 Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3027US | medium5.7 | — | ||
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standar… | ||||
| CVE-2022-38453US | medium4.4OT erhöht | — | ||
Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings. These compiler settings greatly decrease the level o… | ||||
| CVE-2022-38100US | high7.5 | — | ||
The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP req… | ||||
| CVE-2022-38069US | medium6.1OT erhöht | — | ||
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any devi… | ||||
| CVE-2022-36385US | medium6.8 | — | ||
A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality. No authe… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-22-244-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-22-244-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.
- MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.
- MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.
- MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.
- MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan