PT-2025-28974 · Unknown · Command Centre Server

Published 2025-07-10 · Updated 2025-07-10 · CVE-2025-46406

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions: Command Centre Server versions prior to 9.30.1874 (MR1) Command Centre Server versions prior to 9.20.2337 (MR3) Command Centre Server versions prior to 9.10.3194 (MR6) Command Centre Server versions prior to 9.00.3371 (MR7) Command Centre Server versions 8.90 and prior

Description: A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high-level access in one Division to perform limited privileged activities across the Division boundary.

Recommendations: Upgrade Command Centre Server to version 9.30.1874 (MR1) or later. Upgrade Command Centre Server to version 9.20.2337 (MR3) or later. Upgrade Command Centre Server to version 9.10.3194 (MR6) or later. Upgrade Command Centre Server to version 9.00.3371 (MR7) or later. Upgrade Command Centre Server to a version later than 8.90.

Fix

Weakness Enumeration

CWE-270

Related Identifiers

CVE-2025-46406

Affected Products

Command Centre Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-46406 · Security Note
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-46406 · Note
• https://twitter.com/VulmonFeeds/status/1943182434633236582 · Twitter Post
• https://twitter.com/CVEnew/status/1943297329219670264 · Twitter Post