CVE-2025-2313 CRITICAL

CVE-2025-2313: RCE via Print.pl in uhcPrintServerPrint

Vendor Cgm
Product CGM CLININET
Weakness CWE-94 · Code injection
Published August 27, 2025
Last update August 27, 2025
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.

Key dates

02Disclosure timeline

August 27, 2025 CVE published
August 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-8479 Simple Spoiler 1.2 - 1.3 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-27972 WordPress WP Fusion Lite plugin <= 3.41.24 - Remote Code Execution (RCE) vulnerability CVE-2026-33744 BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml CVE-2026-23742 Skipper arbitrary code execution through lua filters CVE-2025-47588 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability