CVE-2025-30052: CWE-290 Authentication Bypass by Spoofing in CGM CGM CLININET

The rsyncd service in CGM CLININET performs authentication by trusting the client's source IP address. This design flaw allows an attacker capable of IP spoofing to bypass authentication controls and gain unauthorized file editing capabilities on the affected system. The vulnerability affects all versions up to and including 2026.MS3. The CVSS 4.0 base score is 8.8, indicating high severity due to network attack vector, no required privileges or user interaction, and high impact on integrity and availability. The product is cloud-hosted, and the vendor manages remediation for this service.

Successful exploitation allows an unauthenticated attacker who can spoof an allowed IP address to bypass authentication and gain the ability to modify files on the affected system. This compromises the integrity and availability of data managed by CGM CLININET's rsyncd service.

A patch is available for this vulnerability. Since CGM CLININET is a cloud-hosted service, the vendor manages remediation server-side. Users should verify with the vendor advisory that their service instance has been updated to a patched version. No additional user action is required if the vendor confirms mitigation.