CVE-2021-23205

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to...

CVE-2021-23205

Gallagher Command Centre Server is affected by an improper encoding/escaping vulnerability that lets a Command Centre Operator alter the configuration of controllers and other hardware items beyond their privileges. Affected versions include Gallagher Command Centre 8.40 before 8.40.1888 (MR3), 8...

CVE-2021-23211

CVE-2021-23211 affects Gallagher Command Centre Server (Gallagher Command Centre 8.40 prior to 8.40.1888 MR3). The root cause is Cleartext Storage of Sensitive Information in Memory, allowing the Cloud end-to-end encryption key to be recoverable from server memory dumps. The connected PT-2021-154...

CVE-2021-23140

CVE-2021-23140 describes an Improper Authorization vulnerability in Gallagher Command Centre Server that allows an unauthorised Command Centre Operator to modify command line macros. Affected are Gallagher Command Centre: 8.40 prior to 8.40.1888 (MR3); 8.30 prior to 8.30.1359 (MR3); 8.20 prior to...

CVE-2021-23204

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3...

CVE-2021-23204

Technical details about CVE-2021-23204 are not publicly provided in the attached documents. The available sources reproduce the exposure description but do not specify affected products/versions beyond Gallagher Command Centre, root cause, or fixed versions. Monitor for updates.

CVE-2021-23182

The CVE-2021-23182 issue affects Gallagher Command Centre Server, where cleartext storage of sensitive information in memory enables discovery of OSDP reader master keys in server memory dumps. Affected are Gallagher Command Centre Server versions prior to 8.40.1888 (MR3) and all 8.30 versions. T...

CVE-2021-23211

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory dumps. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3...

CVE-2021-23140

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prio...

CVE-2021-23230

CVE-2021-23230 describes a SQL injection vulnerability in the Gallagher Command Centre’s OPCUA interface. The root cause is lack of validation of externally entered SQL statements, allowing a remote unprivileged Command Centre Operator to modify the command center databases undetected. Affected v...

CVE-2021-23230

A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359...

CVE-2021-23136

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior t...

CVE-2021-23136

The CVE-2021-23136 entry describes an Improper Authorization vulnerability in Gallagher Command Centre Server that lets an unprivileged Command Centre Operator perform macro overrides. Affected are Gallagher Command Centre Server versions: 8.40 before 8.40.1888 (MR3); 8.30 before 8.30.1359 (MR3);...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Center Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from the exposure of sensitive information in Gallagher Command Centre Server to...

Gallagher Command Centre Server 处理逻辑错误漏洞

Gallagher Command Center Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A Processing Logic Error vulnerability exists in Gallagher Command Centre Server that stems from incorrect coding or escaping in Gallagher Command Centre Server...

Gallagher Command Centre Server 加密问题漏洞

Gallagher Command Center Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. Gallagher Command Centre Server is vulnerable to an encryption issue that originates from the discovery of an OSDP reader master key in a server memory dump of...

PT-2021-15399 · Gallagher · Gallagher Command Centre Server

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre Server versions prior to 8.40.1888 MR3 Gallagher Command Centre Server version 8.30 Description: The issue is related to the cleartext storage of sensitive information in memory, specifically allowing OSDP reader mast...

Gallagher Command Centre Server SQL注入漏洞

Gallagher Command Center Server is a management system used by Gallagher of New Zealand to monitor and manage infrastructure in buildings. Gallagher Command Centre OPCUA Interface A SQL injection vulnerability exists due to a lack of validation of externally entered SQL statements in a...

PT-2021-15406 · Gallagher · Gallagher Command Centre

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3 Description: The issue concerns a Cleartext Storage of Sensitive Information in Memory vulnerability in the Gallagher Command Centre Server. This vulnerability allows the Cloud...

[Security Nation] Megan Stifel and Ciaran Martin discuss the sticky issue of ransomware payments

!\Security Nation\ Megan Stifel and Ciaran Martin discuss the sticky issue of ransomware paymentshttps://blog.rapid7.com/content/images/2021/05/securitynationlogo.jpg In this episode of Security Nation, we are joined by Ciaran Martin of Oxford University and Megan Stifel of the Cyber Global...