Network Authentication Flaw in CGM CLININET by CGM
CVE-2025-30053

6.9MEDIUM

Key Information:

Vendor

Cgm

Status
Cgm Clininet
Vendor
CVE Published:
23 October 2026

What is CVE-2025-30053?

The CGM CLININET application contains a vulnerability where the cgm-updater process listens on an open network port, exposing it to potential unauthorized access. This flaw allows attackers to exploit the lack of authentication, compromising the integrity of the application. It has been confirmed to affect specific versions of the software, with earlier releases being particularly susceptible, although later versions may also have similar vulnerabilities.

Affected Version(s)

CGM CLININET 0 <= 2026.MS3

References

https://cert.pl/en/posts/2026/10/CVE-2025-30043/
third-party-advisory
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet....
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.