CVE-2025-48981
High
Description
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.
SeverityHigh
CVSS8.6
Exploit probability—
ProductCGM MEDICO
PublishedOct 8, 2025
First seenOct 8, 2025
Weakness typeCWE-311CWE-311
How to fix
Update
- CompuGroup Medical CGM MEDICO29.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CompuGroup Medical CGM MEDICO | 29.0 ≤ v < 29.1 | 29.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.