Contec Health vulnerabilities
We track 4 vulnerabilities in Contec Health products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 25, 2025.
Latest Contec Health vulnerabilities
- 7.7 High severity
CMS8000 Patient Monitor: Hidden Functionality
The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if the 'C' button is pressed at a specific time during the boot
- 7.5 High severity
CMS8000 Patient Monitor: Hidden Functionality
The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The funct
- 9.8 Critical severity
CMS8000 Patient Monitor: Out-of-bounds Write
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
- 7.5 High severity
CMS8000 CONTEC ICU CCU Vital Signs Patient…: Uncontrolled Resource Consumption
The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A