CVE-2022-3027 — Contec Health CMS8000
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-stan…
Published: 2022-09-13 · CVSS: 5.7 · CVSS 3.1
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7