CVE-2020-15482

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.

Date published : 2020-08-26

https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor

https://www.niscomed.com/multipara-monitor.html