Description (CNA)
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Contec Health / CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor | affected All |
CWE
CWE-798
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.