Multiple vulnerabilities in Contec Health CMS8000



Published: 2022-09-02
Risk Medium
Patch available NO
Number of vulnerabilities 5
CVE-ID CVE-2022-36385
CVE-2022-38100
CVE-2022-38069
CVE-2022-38453
CVE-2022-3027
CWE-ID CWE-284
CWE-400
CWE-798
CWE-489
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
Hardware solutions / Medical equipment

Vendor Contec

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU66931

Risk: Low

CVSSv3.1: 6.1 [CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C]

CVE-ID: CVE-2022-36385

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. An attacker with physical access can plug in a USB drive, perform a malicious firmware update and load arbitrary firmware on the target device.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions

External links

http://ics-cert.us-cert.gov/advisories/icsma-22-244-01


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource exhaustion

EUVDB-ID: #VU66932

Risk: Medium

CVSSv3.1: 6.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:U/RC:C]

CVE-ID: CVE-2022-38100

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions

External links

http://ics-cert.us-cert.gov/advisories/icsma-22-244-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use of hard-coded credentials

EUVDB-ID: #VU66933

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:C]

CVE-ID: CVE-2022-38069

CWE-ID: CWE-798 - Use of Hard-coded Credentials

Exploit availability: No

Description

The vulnerability allows a local attacker to gain full access to vulnerable system.

The vulnerability exists due to presence of hard-coded credentials in application code. An attacker with physical access can access the affected system using the hard-coded credentials.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions

External links

http://ics-cert.us-cert.gov/advisories/icsma-22-244-01


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Active Debug Code

EUVDB-ID: #VU66935

Risk: Low

CVSSv3.1: 2.8 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C]

CVE-ID: CVE-2022-38453

CWE-ID: CWE-489 - Active Debug Code

Exploit availability: No

Description

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to multiple binary application files are compiled with "not stripped" and "debug_info" compilation settings. A local administrator can reverse engineer sensitive code and identify additional vulnerabilities.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions

External links

http://ics-cert.us-cert.gov/advisories/icsma-22-244-01


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Improper access control

EUVDB-ID: #VU66936

Risk: Low

CVSSv3.1: 5.2 [CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:U/RC:C]

CVE-ID: CVE-2022-3027

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions within the SSID name of a new Wi-Fi access point. A remote attacker on the local network can use an SSID with a malicious name and write arbitrary files or display incorrect information.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions

External links

http://ics-cert.us-cert.gov/advisories/icsma-22-244-01


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###