Lucene search

[email protected]CVE-2023-22363

HistoryJul 25, 2023 - 12:15 a.m.

CVE-2023-22363

2023-07-2500:15:09

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-22363

stack-based buffer overflow

command centre server

denial of service attack

access group

nvd

security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.0%

JSON

A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group.

This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2)

Affected configurations

NVD

Node

gallaghercommand_centreRange8.80–8.80.1192

CPENameOperatorVersion
gallagher:command_centregallagher command centrelt8.80.1192

CPE	Name	Operator	Version
gallagher:command_centre	gallagher command centre	lt	8.80.1192

CNA Affected

[
  {
    "vendor": "Gallagher",
    "product": "Command Centre",
    "versions": [
      {
        "status": "affected",
        "version": "vEL8.80",
        "lessThan": "1192",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-22363

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.0%

JSON

Related for CVE-2023-22363

prion1 nvd1 cvelist1