CC
Product
Command Centre
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 14Medium 23Low 3
Watch
Add Command Centre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-23140 | 8.8 | Jun 11 | Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator Affected: through 8.10; 8.20 before 8.20.1259; 8.30 before 8.30.1359; 8.40 before 8.40.1888 |
| CVE-2020-16103 | 8.8 | Dec 14 | Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution Affected: through 8.00; 8.10 before 8.10.1211; 8.20 before 8.20.1166; 8.30 before 8.30.1236; 8.10.1211; 8.10.1211; +4 more |
| CVE-2026-25193 | 8.6 | May 25 | Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. Mitigating Factor: Only… Affected: before 9.40.2575 |
| CVE-2020-16102 | 8.2 | Dec 14 | Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing… Affected: before 7.90.0; 8.00 before 8.00.1252; 8.10 before 8.10.1253; 8.20 before 8.20.1218; 8.30 before 8.30.1299; 8.00.1252; +7 more |
| CVE-2023-23570 | 8.1 | Dec 18 | Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior Affected: through 8.80; 8.90 before 8.90.1620 |
| CVE-2021-23205 | 8.1 | Jun 11 | Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their… Affected: through 8.10; 8.20 before 8.20.1259; 8.30 before 8.30.1359; 8.40 before 8.40.1888 |
| CVE-2021-23197 | 7.8 | Nov 18 | Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service Affected: 8.50 before 8.50.2048 |
| CVE-2020-16096 | 7.7 | Sep 15 | In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any… Affected: 7.80 before 7.80.960; 7.90 before 7.90.991; 8.00 before 8.00.1161; 8.10 before 8.10.1134; 7.80.960; 7.90.991; +2 more |
| CVE-2023-22363 | 7.5 | Jul 25 | A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group Affected: 8.80 before 8.80.1192 |
| CVE-2021-23146 | 7.5 | Nov 18 | An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification Affected: through 8.00; 8.10 before 8.10.1284; 8.20 before 8.20.1259; 8.30 before 8.30.1359; 8.40 before 8.40.1888 |
| CVE-2020-16101 | 7.5 | Sep 15 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access Affected: 8.00 before 8.00.1228; 8.10 before 8.10.1211; 8.20 before 8.20.1166; 8.00.1228; 8.10.1211; 8.20.1166 |
| CVE-2020-16100 | 7.5 | Sep 15 | It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket… Affected: 8.00 before 8.00.1228; 8.10 before 8.10.1211; 8.20 before 8.20.1166; 8.00.1228; 8.10.1211; 8.20.1166 |
| CVE-2020-16104 | 7.2 | Dec 14 | SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary… Affected: before 7.90.0; 8.00 before 8.00.1228; 8.10 before 8.10.1211; 8.20 before 8.20.1166; 8.30 before 8.30.1236; 8.00.1228; +7 more |
| CVE-2023-46686 | 7.1 | Dec 18 | A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure… Affected: 9.00 before 9.00.1507; 9.00.1507 |
Showing 14