Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Gallagher Command Centre 8.20.1259 (MR5), 8.30.1359 (MR3), 8.40.1888 (MR3) Clear all filters
TI-2021-05970 CVE-2021-23205 · GHSA-mh7q-v46c-8vpg

Improper output encoding in Gallagher Command Centre

Priority LOW 37

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00871 Published 2021-06-11 Fixed in 8.40.1888 (MR3), 8.30.1359 (MR3) +1 CWE-116
TI-2021-05931 CVE-2021-23140 · GHSA-wh2j-wj4x-j48f

Improper authorization in Gallagher Command Centre

Priority MEDIUM 44

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00853 Published 2021-06-11 Fixed in 8.40.1888 (MR3), 8.30.1359 (MR3) +1 CWE-285
TI-2021-05928 CVE-2021-23136 · GHSA-gppj-jgfq-6wcp

Improper authorization in Gallagher Command Centre

Priority LOW 30

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2021-06-11 Fixed in 8.40.1888 (MR3), 8.30.1359 (MR3) +1 CWE-285