Vulnerability in Compugroup Medical Cgm Medico
CVE-2025-48981
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.
EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L.
Affected products
- Compugroup Medical Cgm Medico — versions 29.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-48981?
- CVE-2025-48981 is a high-severity vulnerability in Compugroup Medical Cgm Medico, classified under Missing Encryption of Sensitive Data. CVSS score: 8.6/10. Published 2025-10-08.
- How severe is CVE-2025-48981?
- High severity. CVSS v3 base score is 8.6 out of 10.
- Is CVE-2025-48981 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.