An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.
References
Link | Resource |
---|---|
https://security.gallagher.com/Security-Advisories/CVE-2021-23146 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Apr 2022, 17:15
Type | Values Removed | Values Added |
---|---|---|
Summary | An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions. |
24 Nov 2021, 02:22
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-697 | |
References | (MISC) https://security.gallagher.com/Security-Advisories/CVE-2021-23146 - Vendor Advisory | |
CPE | cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* |
18 Nov 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-11-18 18:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-23146
Mitre link : CVE-2021-23146
CVE.ORG link : CVE-2021-23146
JSON object : View
Products Affected
gallagher
- command_centre