Skip to content

Malware

CMS8000 Backdoor

According to CISA, this is an implant found in firmware for the Contec CMS8000, a patient monitor used by the Healthcare and Public Health sector.

CMS8000 Backdoor is a Linux malware family.

Background

According to CISA, this is an implant embedded in the firmware of the Contec CMS8000, a patient monitor deployed across the Healthcare and Public Health sector. Investigators uncovered a built-in backdoor routine featuring a hard-coded IP address along with functionality that allows patient data to leak.


Source: Malpedia (Fraunhofer FKIE).