Contec Health Cms8000 Patient Monitor
4 CVEs affecting Contec Health Cms8000 Patient Monitor. Latest disclosed: 2025-02-25. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12248 | Critical | 9.8 | 2025-01-30 | Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order… |
CVE-2025-0626 | High | 7.5 | 2025-01-30 | The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings… |
CVE-2025-0683 | Medium | 5.9 | 2025-01-30 | In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is hook… |
CVE-2025-1204 | | 2025-02-25 | The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network set… |