CVE-2024-12248
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CMS8000 Patient Monitor
- Vendor
- Contec Health
- Product
- CMS8000 Patient Monitor
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware version smart3250-2.6.27-wlan2.1.7.cramfs | affected | Unavailable | Unavailable | Unavailable | None listed |
| Firmware version CMS7.820.075.08/0.74(0.75) | affected | Unavailable | Unavailable | Unavailable | None listed |
| Firmware version CMS7.820.120.01/0.93(0.95) | affected | Unavailable | Unavailable | Unavailable | None listed |