Cisa released an Advisory to address vulnerabilities in Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor. Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.

For a complete description of the vulnerabilities and affected systems go to ICS Medical Advisory (ICSMA-22-244-01) Contec Health CMS8000.

IT Security

Read more about IT Security service offerings.