CVE-2025-30042Disclosure(cgm / clininet)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate number is used for access verification. As a result, possession of the certificate number alone is sufficient for authentication, regardless of the actual presence of the smart card or ownership of the private key.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-603

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • clininet

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-03-02); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
clininet

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-02: 2Mentions · 2026-03-09: 1Technical Details · 2026-03-02: 203-0203-09
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-022
Disclosure1General1
2026-03-091
Disclosure1
Full discourse3 posts
  • DailyCVE@dailycve
    Disclosure

    🔴 CGM CLININET, Authentication Bypass, #CVE-2025-30042 (Critical) https://dailycve.com/cgm-clininet-authentication-bypass-cve-2025-30042-critical/

    Post summary

    An authentication bypass vulnerability (CVE-2025-30042) in CGM Clininet has been publicly disclosed as critical, but the text provides no details on PoCs, exploits, active attacks, or patches.

    0000029
    166 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2025-30042 The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate n… https://www.cve.org/CVERecord?id=CVE-2025-30042 ----- Traducción: CVE-2025-30042 El … http://infoflow.cloud`

    Post summary

    The post references CVE-2025-30042, noting that the CGM CLININET system performs local smart card authentication using only the certificate, but provides no further details on exploitation or mitigation.

    0000087
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-30042 The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate n… https://www.cve.org/CVERecord?id=CVE-2025-30042

    Post summary

    The CVE-2025-30042 vulnerability involves local client‑side smart card authentication that only uses the certificate, indicating a flaw in the authentication process.

    00000352
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appcgmclininet---

Explore more