Insecure Protocol Implementation in CGM MEDICO by CGM

CVE-2025-48981

What is CVE-2025-48981?

An insecure implementation of the DNET protocol in CGM MEDICO exposes the system to potential data manipulation and eavesdropping risks for attackers on the intranet due to optional encryption. This vulnerability allows malicious actors to intercept and modify sensitive information transmitted over the network, leading to severe security breaches. Organizations using CGM MEDICO should ensure they apply necessary security patches and review their network protocols to mitigate these risks.

References