CVE-2025-0626

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device.

• CWE-912

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01
• https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication
• https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/
• https://www.cisa.gov/resources-tools/resources/contec-cms8000-contains-backdoor
• https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication

Published

Jan 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0619Unsafe password recovery from configuration in M-Files Serve…4.9
• CVE-2025-0620A flaw was found in Samba. The smbd service daemon does not …4.9
• CVE-2025-0622A flaw was found in command/gpg. In some scenarios, hooks cr…6.4
• CVE-2025-0623Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-0624A flaw was found in grub2. During the network boot process, …7.6
• CVE-2025-0625A vulnerability, which was classified as problematic, was fo…3.1
• CVE-2025-0627The WordPress Tag, Category, and Taxonomy Manager WordPress…3.5
• CVE-2025-0628An improper authorization vulnerability exists in the main-l…8.1
• CVE-2025-0629The Coronavirus (COVID-19) Notice Message WordPress plugin t…4.8
• CVE-2025-0630Multiple Western Telematic (WTI) products contain a web inte…6.5
• CVE-2025-0631A Credential Exposure Vulnerability exists in the above-ment…8.7
• CVE-2025-0632Local File Inclusion (LFI) vulnerability in a Render functio…9.2