CVE-2025-30053
Last modified
CVE-2025-30053 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up to 2026.MS3. Version 2026.MS3 with the updater-upkg component in version 5.3.0 or higher is not affected by this vulnerability.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up to 2026.MS3. Version 2026.MS3 with the updater-upkg component in version 5.3.0 or higher is not affected by this vulnerability.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| CGM | CGM CLININET | <= 2026.MS3 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-30053?
How severe is CVE-2025-30053?
How do I fix CVE-2025-30053?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-30048The "serverConfig" endpoint, which returns the module config…5.3
- CVE-2025-30049The CGM CLININET application stores user passwords as unsalt…8.2
- CVE-2025-3005A vulnerability was found in Sayski ForestBlog up to 2025032…5.4
- CVE-2025-30050CGM CLININET is vulnerable to Code Injection in the RunCGI.p…9.4
- CVE-2025-30051The CGM CLININET application stores the production database …6.8
- CVE-2025-30052The rsyncd service of the CGM CLININET is vulnerable to Auth…8.8
- CVE-2025-30054CGM CLININET is vulnerable to local privilege escalation. Th…9.3
- CVE-2025-30055The "system" function receives untrusted input from the user…9
- CVE-2025-30056The RunCommand function accepts any parameter, which is then…9.4
- CVE-2025-30057In UHCRTFDoc, the filename parameter can be exploited to exe…9.4
- CVE-2025-30058In the PatientService.pl service, the "getPatientIdentifier"…6.9
- CVE-2025-30059In the PrepareCDExportJSON.pl service, the "getPerfServiceId…6.9
Are you affected by CVE-2025-30053?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST