CVE-2025-30057 | CGM CLININET up to 2024.MS3 UHCRTFDoc ConvertToPDF filename code injection

A vulnerability, which was classified as critical, has been found in CGM CLININET up to 2024.MS3. This issue affects the function ConvertToPDF of the component UHCRTFDoc. Performing manipulation of the argument filename results in code injection.

This vulnerability is reported as CVE-2025-30057. The attacker must have access to the local network to execute the attack. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More