Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2020-16096

In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any ope

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher Command Centre

  • unspecified to ≤ 7.70affected
  • 8.10 to < 8.10.1134(MR4)affected
  • 8.00 to < 8.00.1161(MR5)affected
  • 7.90 to < 7.90.991(MR5)affected
  • 7.80 to < 7.80.960(MR2)affected

References