Input validation

2021-11-1818:15:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

JSON

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions.

CPENameOperatorVersion
command_centre_mobile_connectge15.0
command_centre_mobile_connectlt15.04.040
command_centre_mobile_connectle14.0

Name	Operator	Version
command_centre_mobile_connect	ge	15.0
command_centre_mobile_connect	lt	15.04.040
command_centre_mobile_connect	le	14.0

References

security.gallagher.com/Security-Advisories/CVE-2021-23162