PT-2026-22574 · Unknown · Cgm Clininet System

Maciej Kazulak · Publicado 2026-03-02 · Atualizado 2026-03-09 · CVE-2025-30042

Positive Technologies (AI Summary)

CVSS v4.0

9.0

Crítica

Vetor base

AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions CGM CLININET system (affected versions not specified)

Description The CGM CLININET system uses smart card authentication, but authentication happens locally on the client device. Instead of verifying the smart card and private key, only the certificate number is used for access verification. This means that possessing the certificate number is enough to authenticate, even without the smart card or the correct private key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-603

Identificadores relacionados

CVE-2025-30042

Produtos afetados

Cgm Clininet System

Referências · 10

• https://twitter.com/CVEnew/status/2028437082184765696 · Publicação no Twitter
• https://t.me/CVEtracker/46111 · Publicação no Telegram
• https://twitter.com/infoflowcloud/status/2028439258961228028 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-30042 · Aviso do Fabricante
• https://cgm.com/pol_pl/products/szpital/cgm-clininet.html · Nota
• https://twitter.com/dailycve/status/2031118135462424700 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-30042 · Nota de Segurança
• https://t.me/cveNotify/154826 · Publicação no Telegram
• https://t.me/cveNotify/153711 · Publicação no Telegram
• https://cert.pl/en/posts/2026/03/CVE-2025-10350 · Nota