CVE-2021-23205 | BDVDB-2026-155332 Detail
GallagherCommand Centre
Description#
Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-116 Improper Encoding or Escaping of Output
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.