CVE-2022-38100: Contec Health CMS8000
The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent that causes a mass denial-of-service attack on all CME8000 devices connected to the same network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38100?
CVE-2022-38100 is considered high severity due to the potential for a device crash and the need for physical reboot.
How do I fix CVE-2022-38100?
To mitigate CVE-2022-38100, ensure network access is restricted and monitor for unusual UDP traffic targeting the CMS800 device.
Who is affected by CVE-2022-38100?
CVE-2022-38100 affects users of the CMS8000 firmware and the contechealth CMS8000 device.
What are the potential impacts of CVE-2022-38100?
The potential impacts of CVE-2022-38100 include unauthorized device crashes and disruptions in service due to remote attacks.
Is there a patch available for CVE-2022-38100?
As of now, there is no patch available specifically addressing CVE-2022-38100, so workarounds are recommended.