News for hackers. Stuff that matters.

decio

Re:Patient Monitor Contec CMS8000 Contains a Backdoor on Sunday February 02, 2025 @07:10AM (#42908172)
The weird thing about this advisory is that the hardcoded IP addresses (202.114.4[.]119) are the same ones found in the online installation manuals for Contec and affiliated brands ( https://help.xchart.com/en/articles/7943824-configuring-edan... ).

This was confirmed through firmware analysis: https://x.com/craiu/status/1885341007576801338 and in the manuals: https://infosec.exchange/@decio/113928319441297901

yep, on macOS 10.14.6 the command starts but the panes stays empty (silent error) because of SIP "Sandbox: lsof System Policy: deny(1)"
On macOS 10.14.6 the command starts but the frames stays empty (silent error) because of SIP

"Sandbox: lsof System Policy: deny(1)"

Otherwise, really nice idea and work!