CVE-2025-0626
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2025-0626 is a vulnerability affecting the Contec Health CMS8000 Patient Monitor. This issue arises due to the device sending out remote access requests to a hard-coded IP address, disregarding current network settings. This behavior could potentially serve as a backdoor for malicious actors, granting them the ability to upload and overwrite files on the device. By bypassing network security, there is a risk of unauthorized access and potential data breaches. Users are urged to apply patches or updates as soon as they become available to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.