CVE-2022-38069: Contec Health CMS8000
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38069?
CVE-2022-38069 is considered a high severity vulnerability due to the exposure of globally default credentials.
How do I fix CVE-2022-38069?
To mitigate CVE-2022-38069, change the globally default credentials on all affected CMS8000 devices immediately.
What type of access does CVE-2022-38069 allow?
CVE-2022-38069 allows a threat actor with physical access to gain privileged access to CMS8000 devices.
What can be compromised by exploiting CVE-2022-38069?
Exploitation of CVE-2022-38069 can lead to the extraction of sensitive patient information and unauthorized modifications.
Which devices are affected by CVE-2022-38069?
CVE-2022-38069 affects all devices running CMS8000 firmware.