PT-2025-43988 · Bae Systems · Socet Gxp

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-54968

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BAE SOCET GXP versions prior to 4.6.0.2

Description The SOCET GXP Job Service lacks authentication. This may permit remote users to submit jobs, or local users to submit jobs that execute with the permissions of other users.

Recommendations Update to version 4.6.0.2 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-54968

Affected Products

Socet Gxp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-54968 · Security Note
• https://geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54968 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54968 · Vendor Advisory
• https://baesystems.com/en-us/product/geospatial-exploitation-products · Note
• https://t.me/CVEtracker/35869 · Telegram Post