CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors

The U.S. Cybersecurity and Infrastructure Security Agency CISA and the Food and Drug Administration FDA have issued alerts about the presence of hidden functionality in Contec CMS8000 patient monitors and Epsimed MN-120 patient monitors. The vulnerability, tracked as CVE-2025-0626 , carries a CVS...

CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA released a fact sheet, Contec CMS8000 Contains a Backdoor, detailing an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health HPH sector. Analysts discovered that an embedded backdoor function with a hard-coded IP...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on January 30, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-030-01 Hitachi Energy UNEM ICSA-25-030-02 New Rock Technologies Cloud Connected...

CVE-2025-0681

creationtimestamp| type| source ---|---|--- 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 2025-01-30 18:55:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113918826348660828 2025-01-30 22:38:33+00:00| seen| https://t.me/cvedetector/168...

CVE-2025-0680

creationtimestamp| type| source ---|---|--- 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 2025-01-30 18:55:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113918826332969410 2025-01-30 20:48:56+00:00| seen|...

Rockwell Automation KEPServer

RISK EVALUATION Successful exploitation of this vulnerability could cause the device to crash. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system devices...

New Rock Technologies Cloud Connected Devices

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

Rockwell Automation FactoryTalk AssetCentre

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation , as confirmed by Fortinet. CVE-2025-24085link is external Apple Multiple Products Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors...

CVE-2023-3825

creationtimestamp| type| source ---|---|--- 2025-01-28 22:20:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113908308068172337 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-04...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL (CVE-2024-6119, CVE-2024-5535)

Summary IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL CVE-2024-6119, CVE-2024-5535 Vulnerability Details CVEID:CVE-2024-6119 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when performing certificate name checks e.g., TLS clients...

CISA Under Trump

Jen Easterly is out as the Director of CISA. Read her final interview: There's a lot of unfinished business. We have made an impact through our ransomware vulnerability warning pilot and our pre-ransomware notification initiative, and I'm really proud of that, because we work on preventing somebo...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on January 28, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-028-01 B&R Automation Runtime ICSA-25-028-02 Schneider Electric Power Logic...

CVE-2025-24481

creationtimestamp| type| source ---|---|--- 2025-01-28 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-04 2025-01-28 20:58:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113907984678433445 2025-01-28 21:15:50+00:00| seen|...

CVE-2025-0659

creationtimestamp| type| source ---|---|--- 2025-01-28 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-05 2025-01-28 16:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsu3yan5d2r 2025-01-28 17:02:26+00:00| seen|...

CVE-2024-48841

creationtimestamp| type| source ---|---|--- 2025-01-27 20:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqzjt74p27 2025-01-27 20:28:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113902206110094531 2025-01-27 21:51:58+00:00| seen|...

CVE-2024-50698

creationtimestamp| type| source ---|---|--- 2025-01-25 00:05:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3041 2025-01-25 02:07:08+00:00| seen| https://t.me/cvedetector/16352 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50692

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3040 2025-01-25 02:07:12+00:00| seen| https://t.me/cvedetector/16354 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50690

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3039 2025-01-25 02:07:08+00:00| seen| https://t.me/cvedetector/16353 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50694

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3038 2025-01-25 02:07:06+00:00| seen| https://t.me/cvedetector/16349 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...