CVE-2025-30052

The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.

CVSS

No CVSS.

References

Link	Resource
https://cert.pl/en/posts/2026/10/CVE-2025-30043/
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html

Configurations

No configuration.

History

28 Oct 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) El servicio rsyncd de CGM CLININET es vulnerable a la omisión de autenticación mediante suplantación de dirección IP. El acceso se concede únicamente en función de la dirección IP de origen del cliente. Un atacante que pueda suplantar una dirección IP permitida puede eludir esta comprobación y obtener la capacidad de editar archivos en el sistema afectado.\n\nSe confirmó que la vulnerabilidad afecta hasta la versión 2026.MS3 incluida, aunque versiones posteriores también podrían ser vulnerables.

23 Oct 2026, 09:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-23 09:17

Updated : 2026-10-28 20:17

NVD link : CVE-2025-30052

Mitre link : CVE-2025-30052

CVE.ORG link : CVE-2025-30052

JSON object : View

Products Affected

No product.

CWE

CWE-290

Authentication Bypass by Spoofing

{"id": "CVE-2025-30052", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-30052", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-28T18:23:46.146587Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "CGM", "modules": ["rsyncd"], "product": "CGM CLININET", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2026.MS3"}], "defaultStatus": "unknown"}]}], "published": "2026-10-23T09:17:05.040", "references": [{"url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "source": "cvd@cert.pl"}, {"url": "https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html", "source": "cvd@cert.pl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system.\u00a0\n\n\nThe vulnerability was confirmed to affect versions up to\u00a02026.MS3 but later versions may also be vulnerable."}, {"lang": "es", "value": "El servicio rsyncd de CGM CLININET es vulnerable a la omisi\u00f3n de autenticaci\u00f3n mediante suplantaci\u00f3n de direcci\u00f3n IP. El acceso se concede \u00fanicamente en funci\u00f3n de la direcci\u00f3n IP de origen del cliente. Un atacante que pueda suplantar una direcci\u00f3n IP permitida puede eludir esta comprobaci\u00f3n y obtener la capacidad de editar archivos en el sistema afectado.\\n\\nSe confirm\u00f3 que la vulnerabilidad afecta hasta la versi\u00f3n 2026.MS3 incluida, aunque versiones posteriores tambi\u00e9n podr\u00edan ser vulnerables."}], "lastModified": "2026-10-28T20:17:16.373", "sourceIdentifier": "cvd@cert.pl"}