CVE-2021-23146

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

CVE-2021-23162

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions...

CVE-2021-23162

The CVE-2021-23162 entry applies to Gallagher Command Centre Mobile Connect for Android, affecting versions before 15.04.040 and version 14 and earlier. The root cause is improper validation of the cloud certificate chain, enabling a man-in-the-middle attack to impersonate the legitimate Command ...

CVE-2021-23155

CVE-2021-23155 describes improper validation of the cloud certificate chain in Gallagher Command Centre Mobile Client for Android, causing a man-in-the-middle risk where an attacker could impersonate the Command Centre Server. The issue affects Android clients: 8.60 versions prior to 8.60.065 and...

PT-2021-15397

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions prior to 8.50.2048 MR3 Gallagher Command Centre versions prior to 8.40.2063 MR4 Gallagher Command Centre versions prior to 8.30.1454 MR4 Gallagher Command Centre version 8.20 and prior versions Description The...

Gallagher Command Centre Server 信任管理问题漏洞

A security vulnerability exists in Gallagher Command Centre Server, a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. The vulnerability stems from incorrect validation of the cloud certificate chain in Mobile Connect, which could be exploited by ...

PT-2021-15400

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions prior to 8.50.2048 MR3 Gallagher Command Centre versions prior to 8.40.2063 MR4 Gallagher Command Centre versions prior to 8.30.1454 MR4 Gallagher Command Centre versions prior to 8.20.1291 MR6 Gallagher Comma...

PT-2021-15401

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 Description The issue is an unquoted service path vulnerability in the Gallagher Controller Service, allowing an unprivileged user to execute arbitrary code as the account that runs...

PT-2021-15392 · Gallagher · Gallagher Command Centre

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre versions prior to 8.40.1888 MR3 Gallagher Command Centre versions prior to 8.30.1454 MR3 Gallagher Command Centre versions prior to 8.20.1291 MR5 Gallagher Command Centre versions prior to 8.10.1284 MR7 Gallagher...

Gallagher Command Centre Server 代码问题漏洞

Gallagher Command Center Server is a management system for monitoring and managing infrastructure in buildings from Gallagher of New Zealand. Gallagher has a security vulnerability that originates from allowing an unprivileged user to execute arbitrary code as the account running the controller...

PT-2021-15396

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Mobile Connect for Android versions prior to 15.04.040 Gallagher Command Centre Mobile Connect for Android version 14 and prior versions Description The issue is related to improper validation of the cloud certificate...

PT-2021-15395

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Mobile Client for Android versions prior to 8.60.065 Gallagher Command Centre Mobile Client for Android version 8.50 and prior versions Description The issue is related to improper validation of the cloud certificate...

Gallagher Command Centre Server 信息泄露漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. a security vulnerability exists in the COM interface of Gallagher Command Center Server, which could be exploited by an attacker to retrieve sensitive informatio...

CVE-2021-23146: Incomplete Comparison with Missing Factors

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

CVE-2021-23155: Improper Following of a Certificate's Chain of Trust

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

Gallagher Command Centre 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. Gallagher Command Centre Server has a security vulnerability that could be exploited by attackers to bypass PIV authentication...

Gallagher Command Centre Server 信任管理问题漏洞

A security vulnerability exists in Gallagher Command Centre Server, a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings, which stems from incorrect validation of the cloud certificate chain in the mobile client. An attacker could exploit the...

CVE-2021-23167: Improper Certificate Validation

Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3; 8.40 versions prior to 8.40.2063 MR4; 8.30 versions pri...

CVE-2021-23197: Unquoted Search Path or Element

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ;...

CVE-2021-23193: Exposure of Sensitive Information to an Unauthorized Actor

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...