Input validation

2021-11-1818:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions.

CPENameOperatorVersion
command_centre_mobile_clientge8.60
command_centre_mobile_clientlt8.60.065
command_centre_mobile_clientle8.50

Name	Operator	Version
command_centre_mobile_client	ge	8.60
command_centre_mobile_client	lt	8.60.065
command_centre_mobile_client	le	8.50

References

security.gallagher.com/Security-Advisories/CVE-2021-23155