CVE-2022-38069— Contec Health CMS8000
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-38069
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Contec Health CMS8000
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device parameters
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Vulnerability Title
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor是Contec Health公司的一款生命体征病人监护仪。 Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor存在信任管理问题漏洞，该漏洞源于所有CMS8000设备上都存在多个全局默认凭据，这些凭证一旦暴露，威胁行为者可以通过瞬时物理访问获得对任何设备的特权访问，特权凭证访问可以提取敏感的患者信息或修改
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Contec Health | CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor | All | - |
II. Public POCs for CVE-2022-38069
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-38069
请登录查看更多情报信息。
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-38069
Same Patch Batch · Contec Health · 2022-09-13 · 5 CVEs total
| CVE-2022-38100 | 7.5 HIGH | Contec Health CMS8000 |
| CVE-2022-36385 | 6.8 MEDIUM | Contec Health CMS8000 |
| CVE-2022-3027 | 5.7 MEDIUM | Contec Health CMS8000 |
| CVE-2022-38453 | 3.0 LOW | Contec Health CMS8000 |
IV. Related Vulnerabilities
Same vendor: Contec Health
- CVE-2025-1204
Contec Health CMS8000 Patient Monitor 安全漏洞 - CVE-2025-0683
Exposure of Private Personal Information to an Unauthorized - CVE-2025-0626
Hidden Functionality vulnerability in Contec Health CMS8000 - CVE-2024-12248
Out-of-bounds Write vulnerability in Contec Health CMS8000 P - CVE-2022-38453
Contec Health CMS8000
Same weakness: CWE-798
- CVE-2026-7414
Hardcoded credentials in Yarbo robot firmware - CVE-2026-8032
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-cod - CVE-2026-32834
Easy PayPal Events & Tickets 1.3 Authentication Bypass via Q - CVE-2026-42376
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials - CVE-2026-42375
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
V. Comments for CVE-2022-38069
No comments yet