5.7
CVSSv3

CVE-2022-3027

Published: 13/09/2022 Updated: 14/09/2022
CVSS v3 Base Score: 5.7 | Impact Score: 3.6 | Exploitability Score: 2.1
VMScore: 0

Vulnerability Summary

The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

contechealth cms8000 firmware -

ICS Advisories

Contec Health CMS8000
Critical Infrastructure Sectors: Healthcare and Public Health