Back to search
CVE-2025-30057
Published: Aug 27, 2025
Modified: Aug 27, 2025
PUBLISHED
Description
In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.
| Vendor | Product | Versions |
|---|---|---|
CGM | CGM CLININET | affected 0 - < 2024.MS4 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now