CVE-2025-48981 — CompuGroup Medical / CGM MEDICO

CVE-2025-48981

CompuGroup Medical / CGM MEDICO PUBLISHED

Description (CNA)

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.

Affected (CNA)

Vendor / product	Versions
CompuGroup Medical / CGM MEDICO	affected 29.0 before 29.1

CWE

No CWE identifiers supplied.

References

https://www.cgm.com/deu_de/allgemein/cybersecurity-en/security-advisoriy.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.