by Kastro
Paper/Archive/CVE-2024-12248

CVE-2024-12248

Contec Health CMS8000 Patient Monitor — Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 70.4.704 × 2014.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.

Affected

ProductAffectedFixed inSource
CMS8000 Patient MonitorFirmware version smart3250-2.6.27-wlan2.1.7.cramfs–CNA
CMS8000 Patient MonitorFirmware version CMS7.820.075.08/0.74(0.75)–CNA
CMS8000 Patient MonitorFirmware version CMS7.820.120.01/0.93(0.95)–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-medical-advisories/icsma-25-030-01reffda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication