critical9.9
CVE-2020-16096
In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70…
Impact
In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallagher | Command Centre | from 7.80 before 7.80.960 from 7.90 before 7.90.991 from 8.00 before 8.00.1161 from 8.10 before 8.10.1134 Versions 7.80.960, 7.90.991 |