Vendor
Gallagher
70 known vulnerabilities.
Products
Command Centre 26
Command Centre Server 16
Controller 6000 and Controller 7000 7
Controller 6000 3
Controller 7000 3
Milestone Integration Plugin 1
Controller 7000 and 6000 1
Active Directory Sync 1
Cardholder Sync Utility 1
Diagnostics Service 1
Elevator Service 1
Encoding Kiosk Application 1
Entra ID Sync 1
Event Sync Utility 1
Event Logger 1
Middleware Framework 1
Nexudus Integration 1
Okta Sync 1
Papercut Interface Integration 1
SIP Integration 1
Controller 6000/ Controller 7000 1
T-Series Readers 1
Command Centre Mobile Client for Android 1
Command Centre Diagnostics Service 1
Command Centre Mobile Connect for Android 1
Command Center 1
Gallagher Controller 6000 1
T-20 Readers 1
HBUS Devices 1
Command Centre Mobile Client 1
High Sec End of Line Module 1
NxWitness VMS and Hanwha VMS Integrations 1
T21 Reader 1
33 results · Clear filters · Feed
-
Medium 5.3
An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator…
-
Medium 5.6
Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher…
-
Medium 5.7
Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow…
-
Medium 5.7
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sop…
-
Medium 5.7
Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to ext…
-
Medium 5.5
Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Com…
-
Medium 6.7
Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated u…
-
Medium 5.5
Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to …
-
Medium 5.5
Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privi…
-
Medium 5.6
A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high …
-
Medium 4.3
Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with…
-
Medium 6.5
Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged att…
-
Medium 4.6
Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms coul…
-
Medium 4.6
Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows…
-
Medium 6.5
Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interfac…
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnos…
-
Medium 6.3
External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local…
-
Medium 6.8
External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface a…
-
Medium 4.6
Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the …
-
Medium 6.2
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Seri…
-
Medium 6.8
Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Cent…
-
Medium 5.5
A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallaghe…
-
Medium 4.3
An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to …
-
Medium 4.3
Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site …
-
Medium 5.4
Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid con…
-
Medium 6.8
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechani…
-
Medium 4.3
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view P…
-
Medium 6.5
Access Zone stack overflow
A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2)
-
Medium 5.2
Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrar…
-
Medium 6.0
Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-…
-
Medium 6.0
Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reade…
-
Medium 6.5
Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an un…
-
Medium 4.3
In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accesse…