CVE-2025-30056

Calling system commands via RunCommand PUBLISHED

Description (CNA)

The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system.

Affected (CNA)

Vendor / product	Versions
CGM / CGM CLININET	affected 0 before 2024.MS4.33

CWE

CWE-94

References

https://cert.pl/en/posts/2025/08/CVE-2025-2313/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.