Vulnerability · Published Sep 15, 2020 · Assigned by Gallagher
CVE-2020-16101
High 7.5
In plain English
A high-severity security flaw in Command Centre from Gallagher. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.0%top 35.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Gallagher | Command Centre | unspecified – through 7.908.20 – before 8.20.1166 (MR3)8.10 – before 8.10.1211 (MR5)8.00 – before 8.00.1228 (MR6) |
Weakness: CWE-805 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://security.gallagher.com/Security-Advisories/CVE-2020-16101 x_refsource_MISC