EUVD-2022-40702

Malicious code in bioql PyPI...

CVE-2022-38100

The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent...

Design/Logic Flaw

The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent...

CVE-2022-38100

The CVE-2022-38100 vulnerability affects Contec Health CMS8000 (and CME8000 devices) where parsing malformed network data causes a crash requiring a physical reboot. A threat actor with network access can remotely issue a specially formatted UDP request, and a UDP broadcast could trigger a mass d...

CVE-2022-38100: Uncontrolled Resource Consumption

The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent...