Vulnerabilities > CVE-2023-46686 - Unspecified vulnerability in Gallagher Command Centre 9.00/9.00.1507

047910
CVSS 7.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
gallagher

Summary

A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure communication protocols. This issue affects: Gallagher Diagnostics Service prior to v1.3.0 (distributed in 9.00.1507(MR1)).

Vulnerable Configurations

Part Description Count
Application
Gallagher
2