CVE-2025-48430CWE-248

CVE-2025-48430

Medium · published October 23, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will.

This issue affects Command Centre Server:

9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2025-10-23T08:16Z
References (1)
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-48430 · [email protected]
EPSS history
Timeline
  • 23 OCT 03:39Z
    Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will
    cvelistv5