Skip to content
OpenAdvisories
High ICSMA-22-244-01 5 CVEs

Contec Health CMS8000 Patient Monitor (Update A)

Published Sep 1, 2022 · Updated Jan 30, 2025 · Revision 2

Vendor: Contec Health Product: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor

Summary

Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.

Vulnerabilities 5

  • High 7.5
    CVE-2022-38100

    Contec Health CMS8000

    The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. …

    Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
  • Medium 6.8
    CVE-2022-36385

    Contec Health CMS8000

    A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality. No authentication or controls are in place to prevent a threat actor from maliciously m…

    Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
  • Medium 5.7
    CVE-2022-3027

    Contec Health CMS8000

    The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, t…

    Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
  • Medium 4.3
    CVE-2022-38069

    Contec Health CMS8000

    Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient in…

    Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
  • Low 3.0
    CVE-2022-38453

    Contec Health CMS8000

    Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings. These compiler settings greatly decrease the level of effort for a threat actor to reverse engineer sensitive code and identify add…

    Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor

Revision history

  1. #2

    Update A - Updated Risk Evaluation section vulnerabilities, Added in CVSS 4.0 scores, updated discouraged CWEs, aligned title and mitigation recommendations with ICSMA-25-031-01.

  2. #1

    Initial Publication

References