CISA and FDA say Contec patient monitors used in the US contain a backdoor that could allow remote attackers to tamper with the device.