Contec Health
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor | 5 | – | Sep 13, 2022 |
| CMS8000 Patient Monitor | 4 | – | Feb 25, 2025 |
Exploited and recent CVEs
- CVE-2025-1204 The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if 0.5%
- CVE-2025-0683 Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient Monitor 0.8%
- CVE-2025-0626 Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor 1.1%
- CVE-2024-12248 Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor 1.3%
- CVE-2022-38453 Contec Health CMS8000 0.2%
- CVE-2022-3027 Contec Health CMS8000 0.3%
- CVE-2022-38069 Contec Health CMS8000 0.3%
- CVE-2022-38100 Contec Health CMS8000 1.0%
- CVE-2022-36385 Contec Health CMS8000 0.4%