Contec Health CMS8000
CVE-2022-38069
4.3MEDIUM
What is CVE-2022-38069?
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters
Affected Version(s)
CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor All
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Level Nine reported these vulnerabilities to CISA.