Vulnerability Description
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Related Weaknesses (CWE)
References
- https://cert.pl/en/posts/2026/10/CVE-2025-30043/
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
FAQ
What is CVE-2025-30052?
CVE-2025-30052 is a documented vulnerability. The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP...
How severe is CVE-2025-30052?
CVSS scoring is not yet available for CVE-2025-30052. Check NVD for updates.
Is there a patch for CVE-2025-30052?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.