CVE-2024-12248: Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor

Published Jan 30, 2025

Updated

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.

Affected Software

1 affected component

Contec Health CMS8000 Patient Monitor

Remediation

Information

Per FDA recommendation, CISA recommends users remove any Contec CMS8000 devices from their networks. Please note that this device may be re-labeled and sold by resellers. For a list of known re-labeled devices, please refer to FDA's safety communication https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication .

Event History

Jan 30, 2025

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Feb 3, 2025

News Published

via The Register·02:02 AM

News Published

via The Register·02:20 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-12248?

CVE-2024-12248 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-12248?

To address CVE-2024-12248, update the Contec Health CMS8000 Patient Monitor to the latest firmware version provided by the vendor.

What kind of attacks can exploit CVE-2024-12248?

CVE-2024-12248 can be exploited by sending specially formatted UDP requests that trigger an out-of-bounds write.

Who is affected by CVE-2024-12248?

The Contec Health CMS8000 Patient Monitor is the primary affected product by CVE-2024-12248.

What are the potential consequences of CVE-2024-12248?

Exploiting CVE-2024-12248 could lead to remote code execution, allowing an attacker to gain control over the patient monitor.