Command injection

2020-09-1514:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily hang or disconnect.

CPENameOperatorVersion
command_centrege8.20
command_centrelt8.20.1093
command_centreeq8.20.1093

Name	Operator	Version
command_centre	ge	8.20
command_centre	lt	8.20.1093
command_centre	eq	8.20.1093

References

security.gallagher.com/Security-Advisories/CVE-2020-16099