CVE-2021-23193

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 18-11-2021 08:15

Last modified: - 26-04-2022 05:34

Total changes: - 2

Description

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ; 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; 8.20 versions prior to 8.20.1291 (MR6); version 8.10 and prior versions.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

None

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

6.5

Base score

2.8

3.6

Exploitability score

Impact score

Verification logic

vendor=gallagher AND product=command_centre AND versionEndIncluding=8.10

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.20 AND versionEndExcluding=8.20.1291

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.30 AND versionEndExcluding=8.30.1454

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.40 AND versionEndExcluding=8.40.2063

vendor=gallagher AND product=command_centre AND versionStartIncluding=8.50 AND versionEndExcluding=8.50.2048

Reference

https://security.gallagher.com/Security-Advisories/CVE-2021-23193

Keywords

CVE-2021-23193

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-23193

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures