CMS8000 Patient Monitor vulnerabilities
3 known vulnerabilities in CMS8000 Patient Monitor from Contec Health. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.7 High severity
CMS8000 Patient Monitor: Hidden Functionality
The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if the 'C' button is pressed at a specific time during the boot
- 7.5 High severity
CMS8000 Patient Monitor: Hidden Functionality
The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The funct
- 9.8 Critical severity
CMS8000 Patient Monitor: Out-of-bounds Write
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.