CVE-2023-23584

CVE-2023-23584 concerns Gallagher Command Centre. A bug in the REST API creates an observable response discrepancy that lets an insufficiently privileged user infer the presence of items that would normally be hidden. Affected versions include Gallagher Command Centre 8.50 and earlier, 8.60 prior...

CVE-2020-16099

Gallagher Command Centre (v8.20, prior to v8.20.1093MR2) is affected by CVE-2020-16099. The vulnerability allows attackers to create Guard Tour events that, when accessed (e.g., via reporting), can cause client applications to temporarily hang or disconnect. Public technical details are limited i...

CVE-2023-22439

The CVE-2023-22439 entry concerns Gallagher Controller 6000 and 7000 (all affected versions listed below) and stems from improper input validation of a large HTTP request in the diagnostic web interface (Port 80). This vulnerability can be exploited to cause a Denial of Service against the diagno...

CVE-2023-23576

The CVE describes an incorrect behavior order in Gallagher Command Centre Server that could let a privileged user extend physical site access after a network outage when competencies are used in access decisions. Affected are Gallagher Command Centre versions: 8.50 and prior; 8.60 prior to MR7 (v...