CVE-2024-12248

CRITICAL

Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-12248 has a selected CVSS score of 9.3 (critical).

Description

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 20, 2026 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 31, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

CMS8000 Patient Monitor

Browse Contec Health / CMS8000 Patient Monitor

Default status: unaffected

VulnCheck, CVE ListFirmware version smart3250-2.6.27-wlan2.1.7.cramfsaffected
Firmware version CMS7.820.075.08/0.74(0.75)affected
Firmware version CMS7.820.120.01/0.93(0.95)affected

References

3