CVE-2025-30048 MEDIUM

CVE-2025-30048: Unauthenticated access to module configuration endpoint

Vendor Cgm
Product CGM CLININET
Weakness CWE-306 · Missing auth
Published August 27, 2025
Last update August 27, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

What the vulnerability does

01Description

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.

Key dates

02Disclosure timeline

August 27, 2025 CVE published
August 27, 2025 Record updated