CVE-2020-16100

CVE-2020-16100 describes a vulnerability in Gallagher Command Centre versions prior to v8.20.1166 (MR3), v8.10.1211 (MR5), v8.00.1228 (MR6), and all versions of 7.90 and earlier. An unauthenticated remote DCOM websocket connection can crash the Command Centre service's DCOM websocket thread due to improper handling of closed connections. This prevents the service from accepting new DCOM websocket connections, leading to a denial of service. The vulnerability has a CVSS v3.1 score of 7.5 (HIGH), indicating it can be exploited remotely without authentication and with low attack complexity, resulting in high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness.