News for hackers. Stuff that matters.

A comment on Patient Monitor Contec CMS8000 Contains a Backdoor. Parent comment

Re:Patient Monitor Contec CMS8000 Contains a Backdoor by decio on Sunday February 02, 2025 @07:10AM (#42908172)
The weird thing about this advisory is that the hardcoded IP addresses (202.114.4[.]119) are the same ones found in the online installation manuals for Contec and affiliated brands ( https://help.xchart.com/en/articles/7943824-configuring-edan... ).

This was confirmed through firmware analysis: https://x.com/craiu/status/1885341007576801338 and in the manuals: https://infosec.exchange/@decio/113928319441297901

[ Parent | on HN ]

There are no comments on this comment yet.