Vulnerability · Published Jul 10, 2025 · Assigned by Gallagher
CVE-2025-46406
Medium 5.6
In plain English
A medium-severity security flaw in Command Centre Server from Gallagher. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged activities across the Division boundary. This issue affects Command Centre Server: 9.30 prior to 9.30.1874 (MR1), 9.20 prior to 9.20.2337 (MR3), 9.10 prior to 9.10.3194 (MR6), 9.00 prior to 9.00.3371 (MR7), all versions of 8.90 and prior.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Gallagher | Command Centre Server | 0 – through 8.909.30 – before 9.30.1874 (MR1)9.20 – before 9.20.2337 (MR3)9.10 – before 9.10.3194 (MR6)9.00 – before 9.00.3371 (MR7) |
Weakness: CWE-270 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L