Live › vulnerability › CVE-2025-30052
Go to dashboardThe rsyncd service in CGM CLININET (hospital information system) allows access based only on the client's source IP. An attacker able to spoof an allowed IP, e.g. from the adjacent network, can edit files on the server. Affects all versions through 2026.MS3; later versions may also be affected. Reported by Maciej Kazulak via CERT Polska.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| CGM CLININET | vendor | <= 2026.MS3 | – |
hosts allow entries: if IP allow-listing is the only control, you are exposedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
This page as .md · .json · in your agent: get_signal("CVE-2025-30052")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.