CVE-2020-16098

CVE-2020-16098 is a critical vulnerability affecting Gallagher Command Centre versions 8.20 prior to 8.20.1166, 8.10 prior to 8.10.1211, 8.00 prior to 8.00.1228, and all versions of 7.90 and earlier. It allows an unauthenticated attacker to enumerate access card credentials over the network. With a CVSS score of 9.8, this vulnerability is critical due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability, as enumerated credentials can be used to create unauthorized access cards. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.