What’s Vulnerable › Vulnerabilities
CVE-2025-48981
- Severity: high (CVSS 8.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-08 · updated 2026-10-08
- Weakness: CWE-311
Description
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.
Affected products
- CompuGroup Medical CGM MEDICO: from 29.0 before 29.1 — fixed in 29.1
How to fix
Upgrade to a fixed version: CompuGroup Medical CGM MEDICO 29.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-48981 or the next vulnerability affects your stack