Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-48430 EUVD-2025-35647GHSA-v554-gp5g-23rq

Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server a…

Published Oct 23, 2025 · Updated Oct 23, 2025 · Assigned by Gallagher

Description

Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will.

This issue affects Command Centre Server:

9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Server ≤ 8.90, 9.30 – < 9.30.2482 (MR2), 9.20 – < 9.20.2819 (MR4), 9.10 – < 9.10.3672 (MR7), 9.00 – < 9.00.3831 (MR8) 9.30.2482 (MR2)

References