NetSight
high7.5

CVE-2020-16101

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access.

Impact

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.

Affected products

VendorProductAffected versions
GallagherCommand Centre
from 8.00 before 8.00.1228
from 8.10 before 8.10.1211
from 8.20 before 8.20.1166
Versions 8.00.1228, 8.10.1211, 8.20.1166

Weakness classification

References