Authentication Bypass in CGM CLININET rsyncd Service
CVE-2025-30052

8.8HIGH

Key Information:

Vendor

Cgm

Status
Cgm Clininet
Vendor
CVE Published:
23 October 2026

What is CVE-2025-30052?

The rsyncd service of CGM CLININET is susceptible to an authentication bypass flaw due to reliance on the client's source IP address for access control. This misconfiguration allows an attacker to spoof an authorized IP address, thereby circumventing security measures and potentially manipulating or editing files on the impacted system. Versions of CGM CLININET preceding 2026.MS3 are confirmed to be vulnerable, necessitating immediate attention and remediation.

Affected Version(s)

CGM CLININET 0 <= 2026.MS3

References

https://cert.pl/en/posts/2026/10/CVE-2025-30043/
third-party-advisory
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet....
product

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.