Privilege escalation

2020-01-1702:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.

CPENameOperatorVersion
command_centrelt7.70
command_centrege7.80
command_centrelt7.80.960
command_centrege7.90
command_centrelt7.90.991
command_centrege8.10
command_centrelt8.10.1134
command_centrege8.00
command_centrelt8.00.1161
command_centreeq8.10.1134

Name	Operator	Version
command_centre	lt	7.70
command_centre	ge	7.80
command_centre	lt	7.80.960
command_centre	ge	7.90
command_centre	lt	7.90.991
command_centre	ge	8.10
command_centre	lt	8.10.1134
command_centre	ge	8.00
command_centre	lt	8.00.1161
command_centre	eq	8.10.1134

Rows per page:

1-10 of 131

References

security.gallagher.com/cve-2019-19802