CVE-2025-30053Medium· 6.9▾ SunlitThe CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 38 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
clininet <= 2026.MS3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-30043High· 7.1Missing Authentication in CGM CLININET
CVE-2025-30046Critical· 9.0Remote Code Execution in CGM CLININET
CVE-2025-30049High· 8.2Use of Unsalted MD5 Password Hashes in CGM CLININET
CVE-2025-30045High· 8.6Code Injection in CGM CLININET
CVE-2025-30050Critical· 9.4Remote Code Execution in CGM CLININET
CVE-2025-30047Critical· 9.4Remote Code Execution via Java Deserialization in CGM CLININET