Gallagher

Records75All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

Gallagher records in CISA KEV

No Gallagher vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Command Centre 42 records MEDIUM Controller 6000 Firmware 5 records MEDIUM Active Directory Sync 1 record LOW Cardholder Sync Utility 1 record LOW Command Centre Mobile 1 record LOW Command Centre Mobile Client 1 record LOW Command Centre Mobile Connect 1 record LOW Controller 7000 Firmware 1 record LOW

Records

1 record in Command Centre Mobile Connect · all components

TI-2021-05941 CVE-2021-23162 · GHSA-xh2h-f6rw-xfqx

Improper certificate validation in Gallagher Command Centre Mobile Connect for Android

LOW 36

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00424 Published 2021-11-18 Fixed in 15.04.040 CWE-296

Open these records in search →

Critical	9
High	26
Medium	35
Low	5
No CVSS	0