CVE-2024-12248
Critical
Description
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCMS8000 Patient Monitor
PublishedJan 30, 2025
First seenJan 30, 2025
Weakness typeCWE-787Out-of-bounds write
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Contec Health CMS8000 Patient Monitor | Firmware version smart3250-2.6.27-wlan2.1.7.cramfs, Firmware version CMS7.820.075.08/0.74(0.75), Firmware version CMS7.820.120.01/0.93(0.95) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.