CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors
The Food and Drug Administration (FDA) and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have warned that Contec CMS8000 and Epsimed MN-120 patient monitors contain concealed functionality.
Tracked as CVE-2025-0626, the vulnerability has a CVSS v4 score of 7.7 out of 10.0. An unnamed outside researcher brought the defect and two additional problems to CISA's attention.
In an advisory, CISA stated that the impacted product circumvents the device's current network settings by sending remote access requests to a hard-coded IP address. This might work as a backdoor, allowing a malevolent actor to upload and replace data on the device read more about CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors.
Get up to date on the latest cybersecurity...