Why I have the feeling that the #CMS8000 is NOT the only Patient Monitor with the infamous "backdoor" related to the IP 202.114.4.120 / 202.114.4.119 ?! 🥲🙈🙉🙊
The #Contec #CMS8000 is a popular medical monitor that tracks a patient’s vital signs. In recent months, the FDA and CISA both warned about a “backdoor” in the device, an “easy-to-exploit vulnerability. #MedicalEquipment #Cybersecurity
Die #Backdoor für den Patientenmonitor ist doch nur der (unsichere) Update-Mechanismus:
claroty.com/team82/research/are-cont... […]
Here more detailed information of #CISA about the #backdoor in #Contec #CMS8000
www.cisa.gov/sites/defaul...
#Backdoor found in two #healthcare patient monitors, linked to #IP in #China
The #US #CISA is warning that #Contec #CMS8000 devices, include a backdoor that quietly sends patient data to a remote IP address and downloads and executes files on the device.
www.bleepingcomputer.com/news/securit...
Medizinische Überwachung:
Backdoor in verbreiteten Patientenmonitoren entdeckt
Durch die Backdoor fließen nicht nur laufend Patientendaten nach China. Auch lassen sich die Geräte von dort aus vollständig kontrollieren. Betroffen #Contec #CMS8000
www.golem.de/news/medizin...
www.borncity.com/blog/2025/02...
#medibubble #cms8000 #backdoor #monitoring
#CMS8000 backdoor
Hardcoded IP: 202.114.4[.]119 (h/t @craiu.bsky.social) registered to Tsinghua University 👀
VT link:
www.virustotal.com/gui/file/4e4...
📝 www.cisa.gov/sites/defaul...
#CISA is warning that Contec #CMS8000 devices, a widely used healthcare patient monitoring device, include a backdoor that quietly sends patient data to a remote IP address and downloads and executes files on the device. #China #backdoor www.bleepingcomputer.com/news/securit...
CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors reconbee.com/cisa-and-fda...
#CISA #FDA #criticalbackdoor #Contec #CMS8000 #patientmonitors #healthcare #cyberattack