Contec Health CMS8000
Vulnerability Description
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3027
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Level Nine reported these vulnerabilities to CISA.
More from Contec Health
View All →Affected Vendor
Contec Health
View all reports →