Contec Health CMS8000 Patient Monitor

• CVE-2025-1204 High 7.7 The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if 0.5%
• CVE-2025-0683 Medium 5.9 Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient Monitor 0.8%
• CVE-2025-0626 High 7.5 Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor 1.1%
• CVE-2024-12248 Critical 9.8 Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor 1.3%