Multiple binary application files on the CMS8000 device are compiled with not stripped and debug_info compilation settings. These compiler settings greatly decrease the level of effort for a threat actor to reverse engineer sensitive code and identify additional vulnerabilities.
The product is released with debugging code still enabled or active.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cms8000_firmware | Contechealth | - (including) | - (including) |