Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-38069
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Contec Health CMS8000
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Vulnerability Title
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor是Contec Health公司的一款生命体征病人监护仪。 Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor存在信任管理问题漏洞,该漏洞源于所有CMS8000设备上都存在多个全局默认凭据,这些凭证一旦暴露,威胁行为者可以通过瞬时物理访问获得对任何设备的特权访问,特权凭证访问可以提取敏感的患者信息或修改
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Contec HealthCMS8000 CONTEC ICU CCU Vital Signs Patient Monitor All -
II. Public POCs for CVE-2022-38069
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2022-38069
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2022-38069

No comments yet


Leave a comment