A vulnerability, which was classified as critical, has been found in CGM CLININET up to 2024.MS3. This issue affects the function
ConvertToPDF
of the component UHCRTFDoc. Performing manipulation of the argument filename results in code injection.
This vulnerability is reported as CVE-2025-30057. The attacker must have access to the local network to execute the attack. No exploit exists.
It is advisable to upgrade the affected component.