CVE-2020-16100

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket Configuration Client connections. Affected versions are...

CVE-2020-16100

CVE-2020-16100 describes an unauthenticated remote DCOM websocket connection that can crash the Command Centre service’s DCOM websocket thread due to improper shutdown of closed websocket connections, preventing future DCOM websocket (Configuration Client) connections. Affected versions are v8.20...

CVE-2020-16099

Gallagher Command Centre (v8.20, prior to v8.20.1093MR2) is affected by CVE-2020-16099. The vulnerability allows attackers to create Guard Tour events that, when accessed (e.g., via reporting), can cause client applications to temporarily hang or disconnect. Public technical details are limited i...

CVE-2020-16099

In Gallagher Command Centre v8.20 prior to v8.20.1093MR2 it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily hang or disconnect...

Gallagher Command Centre Information Disclosure Vulnerability

Gallagher Command Centre is the central management tool for the Gallagher Access Control System. An information disclosure vulnerability exists in Gallagher Command Center versions 7.x prior to 7.90.991 MR5, 8.00 prior to 8.00.1161 MR5, and 8.10 prior to 8.10.1134 MR4. The vulnerability stems fro...

CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991MR5, 8.00 before 8.00.1161MR5, and 8.10 before 8.10.1134MR4. External system configuration data used for third party integrations such as DVR systems were logged in the Command Centre event trail. Any authenticated operator wi...

CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991MR5, 8.00 before 8.00.1161MR5, and 8.10 before 8.10.1134MR4. External system configuration data used for third party integrations such as DVR systems were logged in the Command Centre event trail. Any authenticated operator wi...

Privilege escalation

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991MR5, 8.00 before 8.00.1161MR5, and 8.10 before 8.10.1134MR4. External system configuration data used for third party integrations such as DVR systems were logged in the Command Centre event trail. Any authenticated operator wi...

CVE-2020-7215

Gallagher Command Centre (versions 7.x prior to 7.90.991 MR5; 8.00 prior to 8.00.1161 MR5; 8.10 prior to 8.10.1134 MR4) contains an information disclosure vulnerability where external system configuration data used for third‑party integrations (e.g., DVR systems) is logged in the Event Trail. Any...

CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991MR5, 8.00 before 8.00.1161MR5, and 8.10 before 8.10.1134MR4. External system configuration data used for third party integrations such as DVR systems were logged in the Command Centre event trail. Any authenticated operator wi...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

CVE-2019-19801

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

CVE-2019-19801

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

Privilege escalation

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

Command injection

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

CVE-2019-19802

The CVE covers Gallagher Command Centre Server: affected versions are v8.10 before 8.10.1134 (MR4), v8.00 before 8.00.1161 (MR5), v7.90 before 7.90.991 (MR5), v7.80 before 7.80.960 (MR2), and v7.70 or earlier. An authenticated user connecting to OPC UA can view all data that would be replicated i...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

CVE-2019-19801

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

CVE-2019-19801

CVE-2019-19801 affects Gallagher Command Centre Server versions: v8.10 before 8.10.1134 (MR4), v8.00 before 8.00.1161 (MR5), v7.90 before 7.90.991 (MR5), v7.80 before 7.80.960 (MR2), and v7.70 or earlier. The issue allows an unprivileged but authenticated user to perform a backup of the Command C...