CVE-2022-36385

mediumpriority · track · 27EPSS 0.004 · 33 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.39% (33rd) EPSS

CVSS 6.8 · medium

Is it mine?

8 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality. No authentication or controls are in place to prevent a threat actor from maliciously modifying firmware and performing a drive-by attack to load the firmware on any CMS8000 device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

MitigationCMS8000 CONTEC ICU CCU Vital Signs Patient Monitorcisa_csaf_ot
Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks.

cvss

Technical severity, 0–10. One row per scoring source.

6.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 5.9

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USexploitability 0.9 · impact 5.9

v3.16.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1263USCWE-284US

affected products (8)

Products and version ranges known to be affected.

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: <=CMS7.820.075.08/0.740.75all versionscisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: <=CMS7.820.120.01/0.930.95all versionscisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: <=smart3250-2.6.27-wlan2.1.7.cramfsall versionscisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor≤ CMS7.820.075.08/0.740.75cisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor≤ CMS7.820.120.01/0.930.95cisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor≤ smart3250-2.6.27-wlan2.1.7.cramfscisa_csaf_otUS
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor≤ Allenisa_euvdEU
contechealth cms8000 firmwareall versionsnvdUScpe:2.3:o:contechealth:cms8000_firmware:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSMA-22-244-01Contec Health CMS8000 Patient Monitor (Update A)2022-09-01icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

published 2022-09-13modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan