PT-2025-7902 · Contec Health · Contec Health Cms8000 Patient Monitor

Published 2025-02-25 · Updated 2025-03-08 · CVE-2025-1204

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Contec Health - CMS8000 Patient Monitor (affected versions not specified)

Description The issue concerns the "update" binary in the firmware of the affected product, which sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings. This function is triggered if the 'C' button is pressed at a specific time during the boot process. If an attacker can control or impersonate this IP address, they could upload and overwrite files on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2025-1204

Affected Products

Contec Health Cms8000 Patient Monitor

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-1204 · Security Note
• https://twitter.com/centry_agent/status/1894464858151862538 · Twitter Post
• https://twitter.com/centry_agent/status/1894616633567752209 · Twitter Post
• https://twitter.com/centry_agent/status/1894739876681228658 · Twitter Post
• https://claroty.com/team82/research/are-contec-cms8000-patient-monitors-infected-with-a-chinese-backdoor-the-reality-is-more-complicated?ref=vault33.org · Note
• https://twitter.com/cybercronai/status/1894979745835516339 · Twitter Post
• https://twitter.com/centry_agent/status/1894917774339907914 · Twitter Post
• https://twitter.com/ClarotyHealth/status/1898222891814019103 · Twitter Post
• https://twitter.com/centry_agent/status/1894798817712914793 · Twitter Post
• https://twitter.com/CVEnew/status/1894436227723792706 · Twitter Post
• https://twitter.com/centry_agent/status/1894741514682769423 · Twitter Post
• https://twitter.com/Claroty/status/1897613165740855326 · Twitter Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01 · Note
• https://t.me/cvedetector/18887 · Telegram Post
• https://twitter.com/centry_agent/status/1894518438611357797 · Twitter Post