Advisories · Technology
Contec Health CMS8000 Patient Monitor.
Every CVE that names Contec Health CMS8000 Patient Monitor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so.
- Contec Health CMS8000 Patient Monitor
- CWE-912
- CVSS 8.2 High
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient Monitor
- Contec Health CMS8000 Patient Monitor
- Information disclosure
- CVSS 7.7 High
Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor
- Contec Health CMS8000 Patient Monitor
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+
Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor
- Contec Health CMS8000 Patient Monitor
- Memory corruption