CVE-2021-23230

CVE-2021-23230 describes a SQL injection vulnerability in the Gallagher Command Centre’s OPCUA interface. The root cause is lack of validation of externally entered SQL statements, allowing a remote unprivileged Command Centre Operator to modify the command center databases undetected. Affected v...

CVE-2021-23230: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359...

PT-2021-15411

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions prior to 8.40.1888 MR3 Gallagher Command Centre versions prior to 8.30.1359 MR3 Gallagher Command Centre versions prior to 8.20.1259 MR5 Gallagher Command Centre versions prior to 8.10.1284 MR7 Gallagher Comma...