LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Manufacturers // Contec Health

Contec Health

Contec Health in MedDevice Cyber coverage: 1 story, 1 product named, 5 CVEs, and the company's own disclosures.

Follow Contec Health Claim this page

Stories: 1
Products named: 1
Product CVEs: 5
Responses on record: 0
Latest story: Sep 1, 2022

Coverage

1 story

Contec CMS8000 patient monitors crash on a UDP broadcast and accept unauthenticated USB firmware

CISA advisory ICSMA-22-244-01 covers five vulnerabilities in the Contec Health CMS8000 patient monitor, including CVE-2022-38100 (CVSS v3.1 7.5), a UDP request that crashes every monitor on a network, and CVE-2022-36385, unauthenticated USB firmware updates. Per FDA recommendation, CISA advises removing the monitors from networks.

CISASep 13 min read

Products in our coverage

CMS8000 ICU CCU Vital Signs Patient Monitor CMS7.820.075.08/0.740.75 and earlier; CMS7.820.120.01/0.930.95 and earlier; smart3250-2.6.27-wlan2.1.7.cramfs and earlier vital signs patient monitor

CVEs in coverage of Contec Health products

CVE-2022-3027 CVE-2022-36385 CVE-2022-38069 CVE-2022-38100 CVE-2022-38453

← All manufacturers