CVE-2025-30055

Conditional RCE via the "system" function PUBLISHED

Description (CNA)

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.

Affected (CNA)

Vendor / product	Versions
CGM / CGM CLININET	affected 0 before 2024.MS4

CWE

CWE-94

References

https://cert.pl/en/posts/2025/08/CVE-2025-2313/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.