CVE-2022-3027: Contec Health CMS8000
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3027?
CVE-2022-3027 has been assigned a high severity score due to the potential for remote code execution through manipulated SSID names.
How do I fix CVE-2022-3027?
To mitigate CVE-2022-3027, update the firmware of the CMS8000 device to the latest available version that addresses this vulnerability.
What devices are affected by CVE-2022-3027?
CVE-2022-3027 affects the CMS8000 device including its related firmware versions.
What is the impact of CVE-2022-3027?
The impact of CVE-2022-3027 could lead to unauthorized access and possible exploitation of the device through malicious SSID names.
Can CVE-2022-3027 be exploited remotely?
Yes, CVE-2022-3027 can be exploited remotely if an attacker manages to set up a malicious Wi-Fi access point with a specially crafted SSID.