CVE-2020-16103

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 14-12-2020 09:15

Last modified: - 25-04-2022 07:45

Total changes: - 2

Description

Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); version 8.00 and prior versions.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

8.8

Base score

2.8

5.9

Exploitability score

Impact score

Verification logic

vendor=gallagher AND product=command_centre AND versionEndIncluding=8.00

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.10 AND versionEndExcluding=8.10.1211

vendor=gallagher AND product=command_centre AND version=8.10.1211 AND update=-

vendor=gallagher AND product=command_centre AND version=8.10.1211 AND update=maintenance_release5

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.20 AND versionEndExcluding=8.20.1166

vendor=gallagher AND product=command_centre AND version=8.20.1166 AND update=-

vendor=gallagher AND product=command_centre AND version=8.20.1166 AND update=maintenance_release3

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.30 AND versionEndExcluding=8.30.1236

vendor=gallagher AND product=command_centre AND version=8.30.1236 AND update=-

vendor=gallagher AND product=command_centre AND version=8.30.1236 AND update=maintenance_release1

Reference

https://security.gallagher.com/Security-Advisories/CVE-2020-16103

Keywords

CVE-2020-16103

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-16103

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures