PT-2025-41207 · Unknown · Cgm Medicoi

Published 2025-10-08 · Updated 2025-10-13 · CVE-2025-48981

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions CGM MEDICO (affected versions not specified)

Description An insecure implementation of the proprietary protocol DNET allows attackers within the intranet to eavesdrop and manipulate data. This is due to encryption being optional for connections using this protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2025-48981

Affected Products

Cgm Medicoi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-48981 · Security Note
• https://t.me/CVEtracker/34394 · Telegram Post
• https://twitter.com/cracbot/status/1977690822289007017 · Twitter Post
• https://twitter.com/CVEnew/status/1975763502397571443 · Twitter Post
• https://cgm.com/deu_de/allgemein/cybersecurity-en/security-advisoriy.html · Note