CVE-2025-1204

State: Published
Severity: 7.7 High
Published: Feb 25, 2025
Updated: Feb 25, 2025
Reserved: Feb 10, 2025

Description

The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function triggers if the 'C' button is pressed at a specific time during the boot process. If an attacker is able to control or impersonate this IP address, they could upload and overwrite files on the device.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	icscert

Weaknesses

CWE-912 Hidden Functionality

Affected Products

Product	Versions
CMS8000 Patient MonitorContec Health	0Affected

References

https://claroty.com/team82/research/are-contec-cms8000-patient-monitors-infected-with-a-chinese-backdoor-the-reality-is-more-complicated?ref=vault33.orgthird-party-advisory
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.