Vulnerabilities > Gallagher > Command Centre > 8.80.1369

DATE CVE VULNERABILITY TITLE RISK
2024-03-05 CVE-2024-21815 Insufficiently Protected Credentials vulnerability in Gallagher Command Centre
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users.
network
low complexity
gallagher CWE-522
6.5
2024-03-05 CVE-2024-21838 Cross-site Scripting vulnerability in Gallagher Command Centre
Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre.
network
low complexity
gallagher CWE-79
5.4
2023-12-18 CVE-2023-22439 Improper Input Validation vulnerability in Gallagher Command Centre and Controller 6000 Firmware
Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface. This issue affects: Gallagher Controller 6000 and 7000 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.
network
low complexity
gallagher CWE-20
4.3