Multiple vulnerabilities in Contec Health CMS8000
| Risk | Medium |
| Patch available | NO |
| Number of vulnerabilities | 5 |
| CVE-ID | CVE-2022-36385 CVE-2022-38100 CVE-2022-38069 CVE-2022-38453 CVE-2022-3027 |
| CWE-ID | CWE-284 CWE-400 CWE-798 CWE-489 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Hardware solutions / Medical equipment |
| Vendor | Contec |
Security Bulletin
This security bulletin contains information about 5 vulnerabilities.
1) Improper access control
EUVDB-ID: #VU66931
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-36385
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. An attacker with physical access can plug in a USB drive, perform a malicious firmware update and load arbitrary firmware on the target device.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions
CPE2.3 External linkshttp://ics-cert.us-cert.gov/advisories/icsma-22-244-01
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Resource exhaustion
EUVDB-ID: #VU66932
Risk: Medium
CVSSv3.1: 6.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-38100
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions
CPE2.3 External linkshttp://ics-cert.us-cert.gov/advisories/icsma-22-244-01
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Use of hard-coded credentials
EUVDB-ID: #VU66933
Risk: Low
CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-38069
CWE-ID:
CWE-798 - Use of Hard-coded Credentials
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain full access to vulnerable system.
The vulnerability exists due to presence of hard-coded credentials in application code. An attacker with physical access can access the affected system using the hard-coded credentials.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions
CPE2.3 External linkshttp://ics-cert.us-cert.gov/advisories/icsma-22-244-01
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Active Debug Code
EUVDB-ID: #VU66935
Risk: Low
CVSSv3.1: 2.8 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-38453
CWE-ID:
CWE-489 - Active Debug Code
Exploit availability: No
DescriptionThe vulnerability allows a local user to compromise the target system.
The vulnerability exists due to multiple binary application files are compiled with "not stripped" and "debug_info" compilation settings. A local administrator can reverse engineer sensitive code and identify additional vulnerabilities.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions
CPE2.3 External linkshttp://ics-cert.us-cert.gov/advisories/icsma-22-244-01
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Improper access control
EUVDB-ID: #VU66936
Risk: Low
CVSSv3.1: 5.2 [CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-3027
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions within the SSID name of a new Wi-Fi access point. A remote attacker on the local network can use an SSID with a malicious name and write arbitrary files or display incorrect information.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: All versions
CPE2.3 External linkshttp://ics-cert.us-cert.gov/advisories/icsma-22-244-01
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
