Description (CNA)
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Contec Health / CMS8000 Patient Monitor | affected Firmware version smart3250-2.6.27-wlan2.1.7.cramfs; affected Firmware version CMS7.820.075.08/0.74(0.75); affected Firmware version CMS7.820.120.01/0.93(0.95) |
CWE
CWE-787
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01
- https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication
ADP enrichment
No English description supplied.
No references supplied.