by Kastro
Paper/Archive/CVE-2025-30055

CVE-2025-30055

CGM CGM CLININET — Conditional RCE via the "system" function

EPSS 0.2%CVSS 9.0
critical.is priorityof 100
30
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 14.2.142 × 202.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.

Affected

ProductAffectedFixed inSource
CGM CLININET< 2024.MS42024.MS4CNA

Scores by source

CERT-PL (CNA)9.0CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert.pl/en/posts/2025/08/CVE-2025-2313