Vendors / Contec Health Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Contec Health records in CISA KEV No Contec Health vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
The CMS800 device fails while attempting to parse malformed network data sent by a threat actor.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01047 · Published 2022-09-13 · No fix listed CWE-400
Priority LOW 32
A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00414 · Published 2022-09-13 · No fix listed CWE-284
Priority LOW 27
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device.
CVSS 3.1 MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.0034 · Published 2022-09-13 · No fix listed CWE-798
Priority LOW 26
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point.
CVSS 3.1 MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00324 · Published 2022-09-13 · No fix listed CWE-284
Priority LOW 20
Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings.
CVSS 3.1 MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2022-09-13 · No fix listed CWE-489
Open these records in search → All records by CVSS severity
1 4 4 0 0
THREATIST.IORead the docs