high7.1
CVE-2021-23146
An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.
Impact
An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallagher | Command Centre | through 8.00 from 8.10 before 8.10.1284 from 8.20 before 8.20.1259 from 8.30 before 8.30.1359 from 8.40 before 8.40.1888 |