The weird thing about this advisory is that the hardcoded IP addresses (202.114.... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		decio 12 days ago \| parent \| context \| favorite \| on: Patient Monitor Contec CMS8000 Contains a Backdoor The weird thing about this advisory is that the hardcoded IP addresses (202.114.4[.]119) are the same ones found in the online installation manuals for Contec and affiliated brands ( https://help.xchart.com/en/articles/7943824-configuring-edan... ). This was confirmed through firmware analysis: https://x.com/craiu/status/1885341007576801338 and in the manuals: https://infosec.exchange/@decio/113928319441297901

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact