CVE-2025-30054: CWE-732 Incorrect Permission Assignment for Critical Resource in CGM CGM CLININET
Description
CGM CLININET contains a local privilege escalation vulnerability (CVE-2025-30054) due to incorrect permission assignments on scripts and configuration files used by a root-privileged service processing HL7 messages. An attacker with uhcapache user privileges can modify these files to execute arbitrary code as root. Versions up to 2026.MS3 are confirmed vulnerable. A patch is available. The vulnerability has a critical CVSS 4.0 score of 9.3.
CVSS v4.0
Score 9.3critical
Affected software
CGM
CGM CLININET
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-30054 is a local privilege escalation vulnerability in CGM CLININET caused by incorrect permission assignments (CWE-732) on scripts and configuration files used by a root-privileged service that processes incoming HL7 messages. The service runs as root, but the uhcapache user can modify these files, enabling arbitrary code execution with root privileges. The vulnerability affects versions up to and including 2026.MS3. The CVSS 4.0 score is 9.3, indicating critical severity. The product is a cloud service, and a patch is available.
Potential Impact
An attacker with uhcapache user privileges can escalate their privileges to root by modifying scripts and configuration files of a root-privileged service. This allows arbitrary code execution with full system privileges, potentially compromising the entire system.
Mitigation Recommendations
A patch is available for this vulnerability. Since CGM CLININET is a cloud service, the vendor manages remediation server-side. Users should verify with the vendor that their environment is updated to a patched version beyond 2026.MS3 to mitigate this issue.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CERT-PL
- Date Reserved
- 2025-03-14T14:55:05.985Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Is Cloud Service
- true
Threat ID: 6adb1ece4d27ba8daaeb7e15
Added to database: 10/23/2026, 08:46:06 UTC
Last enriched: 10/23/2026, 09:00:18 UTC
Last updated: 10/23/2026, 09:01:15 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.