medium6.5
CVE-2019-19802
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2)…
Impact
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallagher | Command Centre | before 7.70 from 7.80 before 7.80.960 from 7.90 before 7.90.991 from 8.00 before 8.00.1161 from 8.10 before 8.10.1134 Version 7.80.960 |