PT-2025-4002 · Contec Health · Contec Health Cms8000 Patient Monitor

Published 2025-01-23 · Updated 2025-02-01 · CVE-2025-0683

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Contec Health CMS8000 Patient Monitor version

Description The issue involves the transmission of plain-text patient data to a hard-coded public IP address when a patient is connected to the monitor. This could lead to a leakage of confidential patient data to any device with that IP address or an attacker in a machine-in-the-middle scenario.

Recommendations Contec Health CMS8000 Patient Monitor version : Update the configuration to encrypt patient data transmission and avoid using hard-coded public IP addresses.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

BDU:2025-01122

CVE-2025-0683

Affected Products

Contec Health Cms8000 Patient Monitor

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2025-0683 · Security Note
• https://bdu.fstec.ru/vul/2025-01122 · Security Note
• https://twitter.com/CVEnew/status/1885036055759311156 · Twitter Post
• https://cisa.gov/resources-tools/resources/contec-cms8000-contains-backdoor · Note
• https://fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication · Note
• https://vuldb.com/ru/?id.294142 · Note
• https://t.me/cvenotify/109277 · Telegram Post
• https://twitter.com/mytechnotalent/status/1885093064248639654 · Twitter Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01 · Note
• https://twitter.com/hackingspace/status/1885510596713484658 · Twitter Post
• https://xakep.ru/2025/02/03/contec-backdoor · Note
• https://bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china · Note
• https://twitter.com/y1659rsgh/status/1885726232144466178 · Twitter Post
• https://twitter.com/kevin___hack/status/1885813745324015823 · Twitter Post
• https://cisa.gov/sites/default/files/2025-01/fact-sheet-contec-cms8000-contains-a-backdoor-508c.pdf · Note