{"id":2706,"date":"2025-01-31T14:59:29","date_gmt":"2025-01-31T14:59:29","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/cisa-fda-warn-of-critical-backdoor-in-contec-cms8000-monitors\/"},"modified":"2025-01-31T14:59:31","modified_gmt":"2025-01-31T14:59:31","slug":"cisa-fda-warn-of-critical-backdoor-in-contec-cms8000-monitors","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/cisa-fda-warn-of-critical-backdoor-in-contec-cms8000-monitors\/","title":{"rendered":"CISA, FDA Warn of Critical Backdoor in Contec CMS8000 Monitors"},"content":{"rendered":"\n<\/p>\n

Critical Backdoor in Contec Patient Monitors<\/h1>\n

Vulnerability Alert<\/h2>\n

U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Food and Drug Administration (FDA) have issued alerts about the presence of hidden functionality in Contec CMS8000 patient monitors and Epsimed MN-120 patient monitors.<\/h3>\n

The Contec CMS8000 patient monitors and Epsimed MN-120 patient monitors contain a critical backdoor that allows unauthorized access to the device.<\/h3>\n

Vulnerability Details<\/h2>\n

The vulnerability, tracked as CVE-2025-0626<\/strong>, carries a CVSS v4 score of 7.7 on a scale of 10.0.<\/h3>\n

The flaw, alongside two other issues, was reported to CISA by an anonymous external researcher.<\/h3>\n

"The affected product sends out remote access requests to a hard-coded IP address, bypassing existing device network settings to do so," CISA said in an advisory. "This could serve as a backdoor and lead to a malicious actor being able to upload and overwrite files on the device."<\/h3>\n

Identified Vulnerabilities<\/h2>\n

Two other identified vulnerabilities in the devices are listed below:<\/h3>\n