Summary: The US Cybersecurity and Infrastructure Security Agency (CISA) has identified a backdoor in Contec CMS8000 healthcare monitoring devices that transmits patient data to a remote IP address and allows external execution of files, posing significant security risks. This backdoor, discovered through an external research disclosure, enables remote access that can lead to the complete takeover of affected devices. CISA advises healthcare organizations to disconnect these devices from their networks to mitigate potential harm.
Affected: Contec CMS8000 healthcare monitoring devices
Keypoints :
- Contec CMS8000 devices were found to include a backdoor that sends patient data to a hard-coded external IP address.
- The backdoor allows for external commands, file execution, and potential complete control of the device.
- CISA has recommended that organizations disconnect affected devices from their networks and check for signs of tampering.