Medium severity6.8NVD Advisory· Published Sep 13, 2022· Updated Jun 17, 2026
CVE-2022-36385
CVE-2022-36385
Description
A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality. No authentication or controls are in place to prevent a threat actor from maliciously modifying firmware and performing a drive-by attack to load the firmware on any CMS8000 device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Contec Health/CMS8000 CONTEC ICU CCU Vital Signs Patient Monitorv5Range: All
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsma-22-244-01nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.