Contec Health CMS8000 Patient Monitor (Update A)

🗓️ 30 Jan 2025 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 25 Views

Vulnerabilities in Contec Health CMS8000 allow remote code execution and patient data leakage.

Reporter	Title	Published	Views	Family All 46
BDU FSTEC	The vulnerability of microprogrammed medical device monitoring systems, such as the CMS8000 Patient Monitor and Epsimed MN-120, related to the incorrect provision of information to unauthorized individuals, allows a intruder to gain unauthorized access to protected information and carry out a “man-in-the-middle” type attack.	4 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of the CMS8000 Patient Monitor and Epsimed MN-120 medical devices lies in the fact that they send requests to a rigidly encoded external IP address. This allows attackers to circumvent security restrictions and upload or re-upload files onto the devices.	4 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of medical monitoring devices such as CMS8000 Patient Monitor and Epsimed MN-120 arises from the fact that the output of operations may escape the buffer in memory. This allows an intruder to gain unauthorized access to protected information, execute arbitrary codes, or gain full control over the device.	4 Feb 202500:00	–	bdu_fstec
Circl	CVE-2024-12248	30 Jan 202518:23	–	circl
Circl	CVE-2025-0626	30 Jan 202518:23	–	circl
Circl	CVE-2025-0683	30 Jan 202518:23	–	circl
Circl	CVE-2025-1024	19 Feb 202509:15	–	circl
CISA	CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware	30 Jan 202512:00	–	cisa
CNNVD	Contec Health CMS8000 Patient Monitor 安全漏洞	30 Jan 202500:00	–	cnnvd
CNNVD	Contec Health CMS8000 Patient Monitor 安全漏洞	30 Jan 202500:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsma-25-030-01.json
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

30 Jan 2025 07:00Current

7.8High risk

Vulners AI Score7.8

CVSS 49.3

CVSS 3.14.8 - 9.8

EPSS0.01189

SSVC

vulnerabilities assessment remote code execution patient data leakage cybersecurity strategies network exposure reduction device isolation trusted manufacturers impact analysis defensive measures