These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A Reflected Cross-Site Scripting (XSS) vulnerability was confirmed in CGM CLININET, affecting versions up to 2026.MS3. An attacker can craft a malicious URL to execute JavaScript or HTML code in a victim's browser, allowing session cookie theft and actions on behalf of the victim within the application. This vulnerability is caused by improper neutralization of user-supplied data. Defenders should assess [truncated]
A local privilege escalation vulnerability exists in CGM CLININET due to incorrect permissions on service scripts and configuration files. The service processes incoming HL7 messages with root privileges, but its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these files to execute arbitrary code as root. This vulnerability was confi [truncated]
The CGM CLININET application has a missing authentication vulnerability in the cgm-updater process, which listens on an open network port. This issue was confirmed to affect versions up to 2026.MS3. However, version 2026.MS3 with the updater-upkg component in version 5.3.0 or higher is not affected. The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity.
The CGM CLININET rsyncd service is vulnerable to authentication bypass via IP spoofing. An attacker can edit files on the affected system by spoofing an allowed IP address. This vulnerability was confirmed to affect versions up to 2026.MS3. Defenders should assess exposure and prioritize verification of affected versions and implementation of IP spoofing mitigations. The vulnerability allows unauthorized [truncated]
The CGM CLININET application stores sensitive credentials in the SysIO.pl configuration file with insecure file permissions, making it readable by any local account. This issue was fixed in version 2026.MS3. Local system administrators should assess exposure and prioritize patching to prevent credential exposure. The vulnerability poses a medium-severity risk due to potential unauthorized access to sensit [truncated]
A critical vulnerability was found in CGM CLININET, allowing for remote code execution due to a code injection issue in the RunCGI.pm component. This vulnerability is identified as CVE-2025-30050 and has a CVSS score of 9.4, indicating a high severity level. The issue arises from the dynamic import of modules specified as query parameters, which can be exploited by an attacker from an adjacent network to [truncated]
The CGM CLININET application stores user passwords as unsalted MD5 hashes, which poses a significant security risk. This issue was fixed in versions 2026.MS1 and 2026.MS3. Defenders should assess exposure and prioritize upgrading to a fixed version to mitigate potential password cracking risks. The use of unsalted MD5 hashes for password storage is a known vulnerability that can be exploited by attackers [truncated]
A critical vulnerability was found in CGM CLININET, allowing for remote code execution via Java deserialization. The server's HTTP-based API, used by the administrative module, exchanges data using Java object serialization, which can be exploited by an attacker within the same local network to transmit a crafted serialized object, leading to arbitrary code execution with root privileges on the server. Th [truncated]
A critical vulnerability was found in the CGM CLININET application server. Multiple processes handling HL7 communication with external systems run with root privileges and process untrusted data from those systems. An attacker in an adjacent network can send data to these processes to achieve remote code execution with root privileges. The vulnerability affects versions up to 2026.MS3, but later versions [truncated]
A high-severity code injection vulnerability exists in CGM CLININET, specifically in the ConvExpr function which processes Perl expressions into RTF document content. An authenticated, high-privileged attacker can exploit this vulnerability to execute arbitrary code with root privileges. The vulnerability was confirmed to affect versions up to 2026.MS3, but later versions may also be vulnerable. Defenders [truncated]
PatchSiren debrief for CVE-2025-30043: The CGM CLININET system has a vulnerability in the /DocManagment path, allowing unauthenticated attackers to retrieve and download patient documents. This issue was fixed in version 2026.MS3. Healthcare organizations and IT staff responsible for CGM CLININET systems should assess exposure and apply necessary fixes. The vulnerability poses a high risk to healthcare or [truncated]