Conditional RCE via the “system” function_CVE-2025-30055

9 / 10

CRITICAL

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.

Basic Information

ID CVE-2025-30055

Source CERT-PL

Published Aug 27, 2025 at 10:22

Affected Product

Vendor CGM

Product CGM CLININET

Affected Versions CGM CGM CLININET 0

CWE Classification

CWE-94

References

cert.pl /en/posts/2025/08/CVE-2025-2313/

{
    "lastseen": "",
    "description": "The \"system\" function receives untrusted input from the user. If the \"EnableJSCaching\" option is enabled, it is possible to execute arbitrary code provided as the \"Module\" parameter.",
    "published": "2025-08-27T10:22:41.893Z",
    "modified": "2025-08-27T10:22:41.893Z",
    "type": "cve",
    "title": "Conditional RCE via the \"system\" function",
    "source": "CERT-PL",
    "references": "https://cert.pl/en/posts/2025/08/CVE-2025-2313/",
    "id": "CVE-2025-30055",
    "bulletinFamily": "",
    "cwe": [
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "CGM CGM CLININET 0",
    "sourceHref": "",
    "cvss": {
        "score": 9,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CGM CLININET",
    "version": "0",
    "vendor": "CGM",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}