Contechealth Cms8000 Firmware
5 CVEs affecting Contechealth Cms8000 Firmware. Latest disclosed: 2022-09-13. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38100 | High | 7.5 | 2022-09-13 | The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specia… |
CVE-2022-36385 | Medium | 6.8 | 2022-09-13 | A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device fu… |
CVE-2022-3027 | Medium | 5.7 | 2022-09-13 | The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name… |
CVE-2022-38069 | Medium | 4.3 | 2022-09-13 | Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileg… |
CVE-2022-38453 | Low | 3.0 | 2022-09-13 | Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings. These compiler settings greatly… |