CVE-2025-48981
- State
- Published
- Severity
- 8.6 High
- Published
- Oct 8, 2025
- Updated
- Oct 9, 2025
- Reserved
- May 29, 2025
Description
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.6 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L | CISA-ADP |
Weaknesses
- CWE-311 Missing Encryption of Sensitive Data
Affected Products
| Product | Versions |
|---|---|
CGM MEDICOCompuGroup Medical |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.