CVE-2025-0683 in CMS8000 Patient Monitor
Tóm tắt
Bởi MITRE • 30/01/2025
In its default configuration, the affected product transmits plain-text patient data to a hard-coded public IP address when a patient is hooked up to the monitor. This could lead to a leakage of confidential patient data to any device with that IP address or an attacker in a machine-in-the-middle scenario.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.