PatchTheCVEcontechealth vulnerabilities
Recent CVEs affecting contechealth products. 5 tracked.
contechealth has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-13. Highest priority: CVE-2022-38100 (score 47/100).
- CVE-2022-3027 MEDIUM 5.7 MITIGATE The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point
- CVE-2022-38453 LOW 3.0 MITIGATE Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' comp
- CVE-2022-38100 HIGH 7.5 MITIGATE The CMS800 device fails while attempting to parse malformed network data sent by a threat actor
- CVE-2022-38069 MEDIUM 4.3 MITIGATE Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat acto
- CVE-2022-36385 MEDIUM 6.8 MITIGATE A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware up
FAQ
How do I fix contechealth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is contechealth being exploited right now?
None of the tracked contechealth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which contechealth CVE should I patch first?
CVE-2022-38100 currently ranks highest (47/100): The CMS800 device fails while attempting to parse malformed network data sent by a threat actor.