CC
Product
Command Centre
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 14Medium 23Low 3
Watch
Add Command Centre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-23167 | 6.8 | Nov 18 | Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server Affected: through 8.20; 8.30 before 8.30.1454; 8.40 before 8.40.2063; 8.50 before 8.50.2048 |
| CVE-2024-21815 | 6.5 | Mar 5 | Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users Affected: through 8.60; 8.70 before 8.70.2526; 8.80 before 8.80.1526; 8.90 before 8.90.1751; 9.00 before 9.00.1774 |
| CVE-2023-22428 | 6.5 | Jul 24 | Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage Affected: through 8.40.2216; 8.50 before 8.50.2831; 8.60 before 8.60.2347; 8.70 before 8.70.2185; 8.80 before 8.80.1192 |
| CVE-2021-23193 | 6.5 | Nov 18 | Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from… Affected: through 8.10; 8.20 before 8.20.1291; 8.30 before 8.30.1454; 8.40 before 8.40.2063; 8.50 before 8.50.2048 |
| CVE-2021-23204 | 6.5 | Jun 11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators Affected: 8.30 before 8.30.1359; 8.40 before 8.40.1888 |
| CVE-2021-23136 | 6.5 | Jun 11 | Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator Affected: through 8.10; 8.20 before 8.20.1259; 8.30 before 8.30.1359; 8.40 before 8.40.1888 |
| CVE-2019-19802 | 6.5 | Jan 17 | In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or… Affected: before 7.70; 7.80 before 7.80.960; 7.90 before 7.90.991; 8.00 before 8.00.1161; 8.10 before 8.10.1134; 7.80.960; +3 more |
| CVE-2019-12492 | 6.5 | Jun 6 | Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre… Affected: before 7.80.939; 7.90.0 before 7.90.961; 8.0 before 8.00.1128 |
| CVE-2022-26348 | 5.5 | Jul 6 | Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server Affected: through 8.20; 8.30 before 8.30.1470; 8.40 before 8.40.2216; 8.50 before 8.50.2245; 8.60 before 8.60.1652 |
| CVE-2020-7215 | 5.5 | Jan 20 | An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4) Affected: before 7.80; 7.90 before 7.90.991; 8.00 before 8.00.1161; 8.10 before 8.10.1134; 7.90.991; 8.00.1161; +1 more |
| CVE-2019-19801 | 5.5 | Jan 17 | In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and… Affected: before 7.70; 7.80 before 7.80.960; 7.90 before 7.90.991; 8.00 before 8.00.1161; 8.10 before 8.10.1134; 7.80.960; +3 more |
| CVE-2024-21838 | 5.4 | Mar 5 | Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails… Affected: through 8.60; 8.70 before 8.70.2526; 8.80 before 8.80.1526; 8.90 before 8.90.1751; 9.00 before 9.00.1774 |
| CVE-2023-23568 | 5.4 | Jul 25 | Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields Affected: through 8.40.2216; 8.50 before 8.50.2831; 8.60 before 8.60.2347; 8.70 before 8.70.2185; 8.80 before 8.80.1192; 8.90 before 8.90.1318 |
| CVE-2023-25074 | 5.4 | Jul 25 | Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies Affected: through 8.40.2216; 8.50 before 8.50.2831; 8.60 before 8.60.2347; 8.70 before 8.70.2185; 8.80 before 8.80.1192; 8.90 before 8.90.1318 |
| CVE-2026-26053 | 5.3 | Jul 7 | An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that… Affected: before 9.20.4349; 9.30.1594 before 9.30.3983; 9.40.1359 before 9.40.3130; 9.50.978 before 9.50.1587 |
| CVE-2020-16097 | 4.6 | Sep 15 | On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed in v8.10.1211(MR5)), v8.00 prior to… Affected: 7.90 before 7.90.1038; 8.00 before 8.00.1228; 8.10 before 8.10.1211; 8.20 before 8.20.1093; 7.90.1038; 8.00.1228; +2 more |
| CVE-2021-23211 | 4.4 | Jun 11 | Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory… Affected: 8.40 before 8.40.1888 |
| CVE-2021-23182 | 4.4 | Jun 11 | Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps Affected: 8.30 before 8.40.1888 |
| CVE-2023-23584 | 4.3 | Dec 18 | An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be… Affected: through 8.50; 8.60 before 8.60.2039; 8.70 before 8.70.1787 |
| CVE-2023-23576 | 4.3 | Dec 18 | Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when… Affected: through 8.50; 8.60 before 8.60.2550; 8.70 before 8.70.2375; 8.80 before 8.80.1369; 8.90 before 8.90.1620 |
| CVE-2023-22439 | 4.3 | Dec 18 | Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service… Affected: through 8.50; 8.60 before 8.60.231116a; 8.70 before 8.70.231204a; 8.80 before 8.80.231204a; 8.90 before 8.90.231204a |
| CVE-2021-23230 | 4.3 | Jun 11 | A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected Affected: through 8.00; 8.10 before 8.10.1284; 8.20 before 8.20.1259; 8.30 before 8.30.1359; 8.40 before 8.40.1888; 8.10.1284; +3 more |
| CVE-2020-16099 | 4.3 | Sep 15 | In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily… Affected: 8.20 before 8.20.1093; 8.20.1093 |
Showing 23