PT-2025-43422 · Unknown · Command Centre Server

Published 2025-10-23 · Updated 2025-10-23 · CVE-2025-41402

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Command Centre Server versions 9.00 and prior Command Centre Server versions 9.10 through 9.10.3672 Command Centre Server versions 9.20 through 9.20.2819 Command Centre Server versions 9.30 through 9.30.2482

Description A flaw exists in the Command Centre Server related to client-side enforcement of server-side security. A privileged operator can input incorrect competency data, which circumvents expiry checks.

Recommendations Update Command Centre Server to a version later than 9.00. Update Command Centre Server to a version later than 9.10.3672. Update Command Centre Server to a version later than 9.20.2819. Update Command Centre Server to a version later than 9.30.2482.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-41402

Affected Products

Command Centre Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-41402 · Security Note
• https://t.me/CVEtracker/35545 · Telegram Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-41402 · Note
• https://t.me/cveNotify/139968 · Telegram Post
• https://twitter.com/CVEnew/status/1981219888837390688 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1981261638494748888 · Twitter Post