Gallagher

Records75All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

Gallagher records in CISA KEV

No Gallagher vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Command Centre 42 records MEDIUM Controller 6000 Firmware 5 records MEDIUM Active Directory Sync 1 record LOW Cardholder Sync Utility 1 record LOW Command Centre Mobile 1 record LOW Command Centre Mobile Client 1 record LOW Command Centre Mobile Connect 1 record LOW Controller 7000 Firmware 1 record LOW

Records

1 record in Command Centre Mobile Client · all components

TI-2021-05937 CVE-2021-23155 · GHSA-mqv2-j79j-4gqf

Improper certificate validation in Gallagher Command Centre Mobile Client for Android

LOW 39

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00482 Published 2021-11-18 Fixed in 8.60.065 CWE-296

Open these records in search →

Critical	9
High	26
Medium	35
Low	5
No CVSS	0