Contec Health

Products

ProductCVEsExploitedLatest
CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor5–Sep 13, 2022
CMS8000 Patient Monitor4–Feb 25, 2025

Exploited and recent CVEs

  • CVE-2025-1204 High 7.7 The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if 0.5%
  • CVE-2025-0683 Medium 5.9 Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient Monitor 0.8%
  • CVE-2025-0626 High 7.5 Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor 1.1%
  • CVE-2024-12248 Critical 9.8 Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor 1.3%
  • CVE-2022-38453 Low 3.0 Contec Health CMS8000 0.2%
  • CVE-2022-3027 Medium 5.7 Contec Health CMS8000 0.3%
  • CVE-2022-38069 Medium 4.3 Contec Health CMS8000 0.3%
  • CVE-2022-38100 High 7.5 Contec Health CMS8000 1.0%
  • CVE-2022-36385 Medium 6.8 Contec Health CMS8000 0.4%