News Score: Score the News, Sort the News, Rewrite the Headlines

Contec CMS8000 Contains a Backdoor | CISA

This fact sheet details an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health (HPH) sector. Analysts discovered that an embedded backdoor function with a hard-coded IP address, CWE – 912: Hidden Functionality (CVE-2025-0626), and functionality that enables patient data spillage, CWE – 359: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2025-0683), exists in all versions analyzed. Please note t...

Read more at cisa.gov

© News Score  score the news, sort the news, rewrite the headlines