CVE-2025-54964

Name of the Vulnerable Software and Affected Versions BAE SOCET GXP versions prior to 4.6.0.2

Description An attacker who can interact with the GXP Job Service may be able to inject arbitrary executables. If the Job Service is configured for local access, this could lead to privilege escalation. If the Job Service is accessible over a network, this could lead to remote command execution. The GXP Job Service is the component at risk.

Recommendations Update BAE SOCET GXP to version 4.6.0.2 or later.