Skip to content
OpenAdvisories
High · 7.1 CVE-2021-23146 EUVD-2021-10260GHSA-356x-mxw5-7m2m

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This…

Published Nov 18, 2021 · Updated Sep 17, 2024 · Assigned by Gallagher

Vendor: Gallagher Product: Command Center

Description

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.

Affected products

VendorProductAffectedFixed
Gallagher Command Center 8.40 prior to 8.40.1888 (MR3), 8.30 prior to 8.30.1359 (MR3), 8.20 prior to 8.20.1259 (MR5), 8.10 prior to 8.10.1284 (MR7), 8.00 and prior —

References