The rsyncd service runs on CGM CLININET and relies solely on the client's source IP address for authentication. An attacker capable of spoofing a permitted IP address can gain write access to files on the system, enabling potential further compromise.

Vendor CGM; product CGM CLININET. All versions up to 2026.MS3 are confirmed vulnerable, with the possibility that later releases may also be affected.

The CVSS score of 8.8 indicates high severity. EPSS is unavailable, so the current exploitation probability cannot be quantified, and the vulnerability is not listed in CISA KEV. Attackers would need to spoof a trusted IP to reach the rsyncd service, implying a remote network-based attack vector where authentication is entirely bypassed by IP spoofing.