Remote Code Execution in CGM CLININET
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
CGM CLININET application server, a clinical software product, is affected, specifically its HL7 communication processes that handle data from external systems. An attacker on an adjacent network who can send data to these processes could execute arbitrary code with root-level privileges on the server.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Affected versions
- CGM CGM CLININET
through 2026.MS3