CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors
Briefly

from The Hacker News1 week ago
CISA and FDA have warned about serious vulnerabilities in Contec CMS8000 and Epsimed MN-120 patient monitors, notably CVE-2025-0626, which has a CVSS score of 7.7. This vulnerability allows remote access requests to a hard-coded IP address, potentially serving as a backdoor for malicious activities. Alongside this, other issues expose patient data and allow for arbitrary data writing. Devices with specific firmware versions are impacted, raising significant concerns about patient confidentiality and device security.
The affected product sends out remote access requests to a hard-coded IP address, bypassing existing device network settings to do so.
The Hacker Newshttps://thehackernews.com/2025/01/cisa-and-fda-warn-of-critical-backdoor.html
The reverse backdoor provides automated connectivity to a hard-coded IP address from the Contec CMS8000 devices, allowing the device to download and execute unverified remote files.
The Hacker Newshttps://thehackernews.com/2025/01/cisa-and-fda-warn-of-critical-backdoor.html
Read at The Hacker News
#cybersecurity #patient-monitors #vulnerability #cisa #fda
[
|
]