Description
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec Health | CMS8000 Patient Monitor | Firmware version smart3250-2.6.27-wlan2.1.7.cramfs, Firmware version CMS7.820.075.08/0.74(0.75), Firmware version CMS7.820.120.01/0.93(0.95) | — |
Advisories 1
- ICSMA-25-030-01 Contec Health CMS8000 Patient Monitor (Update A) CISA ICS & IT advisories · Feb 25, 2025