Backdoor found in two healthcare patient monitors, linked to IP in China

Chinese-Made Patient Monitor Contains a Secret Backdoor

The backdoor on Contec CMS8000 patient-monitoring devices could allow an IP address at an unnamed university to remotely download and execute unverified files, according to CISA.

FDA, CISA warn about vulnerabilities in patient health monitors

Cybersecurity News

Backdoor found in two healthcare patient monitors, linked to IP in China

The US Cybersecurity and Infrastructure Security Agency (CISA) is warning that Contec CMS8000 devices, a widely used healthcare patient monitoring device, include a backdoor that quietly sends patient data to a remote IP address and downloads and executes files on the device.

Backdoor in Chinese-made healthcare monitoring device leaks patient data

US federal agencies have warned that a popular Chinese-made patient monitor device used in medical settings across the US and Europe has a built-in backdoor that leaks patient data to an unauthorized remote server. The backdoor, present also in a rebranded version of the device, also allows the remote server, which appears to belong to a university, to execute unauthorized code on the device. According to a safety advisory from the US Food and D…

CISA, FDA warn of vulnerabilities in Contec patient monitors

The Cybersecurity and Infrastructure Security Agency and Food and Drug Administration Jan. 30 released notices warning of vulnerabilities found in the Contec CMS8000, a patient monitoring device used to display patient vital signs. The vulnerabilities also apply to Epsimed MN-120 patient monitors, which are Contec CMS8000 monitors relabeled as MN-120, according to the FDA. The agencies found that the monitors could be remotely controlled by an u…

FDA, CISA warn of backdoor in popular patient monitor used by US hospitals

The Contec CMS8000, a patient monitor made by a company based in China, has vulnerabilities in its firmware that directly expose it to unauthorized access.