Home

Description

Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

PUBLISHED Reserved 2025-06-17 | Published 2025-10-23 | Updated 2025-10-23 | Assigner Gallagher




MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-248 Uncaught Exception

Product status

Default status
unaffected

Any version
affected

9.30 (custom) before 9.30.2482 (MR2)
affected

9.20 (custom) before 9.20.2819 (MR4)
affected

9.10 (custom) before 9.10.3672 (MR7)
affected

9.00 (custom) before 9.00.3831 (MR8)
affected

References

security.gallagher.com/...Security-Advisories/CVE-2025-48430

cve.org (CVE-2025-48430)

nvd.nist.gov (CVE-2025-48430)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.