PT-2025-43425 · Unknown · Command Centre Server

Published 2025-10-23 · Updated 2025-10-23 · CVE-2025-48430

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Command Centre Server versions prior to vEL9.30.2482 (MR2) Command Centre Server versions prior to vEL9.20.2819 (MR4) Command Centre Server versions prior to vEL9.10.3672 (MR7) Command Centre Server versions prior to vEL9.00.3831 (MR8) Command Centre Server versions 8.90 and prior

Description An issue exists in Command Centre Server where an authorized and privileged operator can intentionally cause the server to crash due to an uncaught exception. This is related to CWE-248, improper exception handling.

Recommendations Update Command Centre Server to version vEL9.30.2482 (MR2) or later. Update Command Centre Server to version vEL9.20.2819 (MR4) or later. Update Command Centre Server to version vEL9.10.3672 (MR7) or later. Update Command Centre Server to version vEL9.00.3831 (MR8) or later. Update Command Centre Server to a version later than 8.90.

Fix

DoS

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2025-48430

Affected Products

Command Centre Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-48430 · Security Note
• https://twitter.com/VulmonFeeds/status/1981269317334237332 · Twitter Post
• https://t.me/cveNotify/139971 · Telegram Post
• https://t.me/CVEtracker/35548 · Telegram Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-48430 · Note
• https://twitter.com/CVEnew/status/1981219885989462236 · Twitter Post