Vulnerability Description
The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate number is used for access verification. As a result, possession of the certificate number alone is sufficient for authentication, regardless of the actual presence of the smart card or ownership of the private key.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cgm | Clininet | < 2025.ms2 |
Related Weaknesses (CWE)
References
- https://cert.pl/en/posts/2026/03/CVE-2025-10350/Third Party Advisory
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.htmlProduct
FAQ
What is CVE-2025-30042?
CVE-2025-30042 is a vulnerability with a CVSS score of 7.8 (HIGH). The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate number is used for access verificat...
How severe is CVE-2025-30042?
CVE-2025-30042 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-30042?
Check the references section above for vendor advisories and patch information. Affected products include: Cgm Clininet.