Vulnerability Description
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01
- https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerab
FAQ
What is CVE-2024-12248?
CVE-2024-12248 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could resul...
How severe is CVE-2024-12248?
CVE-2024-12248 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-12248?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.