Command Centre
Vendor:
First CVE: Jun 6, 2019 · Active for 7 years
37
Total CVEs
More Total CVEs than 97% of tracked products
6.2
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 31% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Command Centre over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 6, 2019
7 years ago
Most Recent CVE
Mar 5, 2024
871 days ago
CVE Severity & Scoring
Command Centre37 CVEs
59%
35%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local6 (16.2%)
Network29 (78.4%)
Unknown0 (0.0%)
Physical2 (5.4%)
Adjacent Network0 (0.0%)
Attack Complexity
Low35 (94.6%)
High2 (5.4%)
Unknown0 (0.0%)
User Interaction
None35 (94.6%)
Unknown0 (0.0%)
Required2 (5.4%)
Privileges Required
Low23 (62.2%)
High3 (8.1%)
None11 (29.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (37 CVEs).
37 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-16098CRITICAL It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8.20 prior to v8.20.1166(MR3), versions o | Sep 15, 2020 | 9.8 | 29 | NO | NO |
CVE-2019-15294CRITICAL An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is install | Aug 28, 2019 | 9.8 | 27 | NO | NO |
CVE-2021-23205HIGH Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their pr | Jun 11, 2021 | 8.1 | 26 | NO | NO |
CVE-2020-16103HIGH Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This issue affects: Gallagher Command Centre | Dec 14, 2020 | 8.8 | 26 | NO | NO |
CVE-2021-23140HIGH Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Ga | Jun 11, 2021 | 8.8 | 25 | NO | NO |
CVE-2020-16102HIGH Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing t | Dec 14, 2020 | 8.2 | 25 | NO | NO |
CVE-2021-23197HIGH Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This | Nov 18, 2021 | 7.8 | 24 | NO | NO |
CVE-2021-23146HIGH An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre | Nov 18, 2021 | 7.5 | 24 | NO | NO |
CVE-2021-23193MEDIUM Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from t | Nov 18, 2021 | 6.5 | 22 | NO | NO |
CVE-2021-23167MEDIUM Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server. This issue affects: G | Nov 18, 2021 | 6.8 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (37 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (37 CVEs).
Media Mentions
Signals from CVEs in this product scope (37 CVEs).
Top CNAs Publishing CVEs For Command Centre
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.00.1507 | 1 | 7.1 | 0.5% | 0 | 0 |
| 8.40.1888 | 1 | 4.3 | 0.7% | 0 | 0 |
| 8.30.1359 | 1 | 4.3 | 0.7% | 0 | 0 |
| 8.30.1299 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.30.1236 | 3 | 8.4 | 1.5% | 0 | 0 |
| 8.20.1259 | 1 | 4.3 | 0.7% | 0 | 0 |
| 8.20.1218 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.20.1166 | 5 | 8.1 | 1.3% | 0 | 0 |
| 8.20.1093 | 2 | 4.5 | 0.5% | 0 | 0 |
| 8.10.1284 | 1 | 4.3 | 0.7% | 0 | 0 |
| 8.10.1253 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.10.1211 | 6 | 7.7 | 1.2% | 0 | 0 |
| 8.10.1134 | 4 | 6.3 | 0.5% | 0 | 0 |
| 8.00.1252 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.00.1228 | 5 | 7.3 | 0.9% | 0 | 0 |
| 8.00.1161 | 4 | 6.3 | 0.5% | 0 | 0 |
| 7.90.991 | 4 | 6.3 | 0.5% | 0 | 0 |
| 7.90.1038 | 1 | 4.6 | 0.3% | 0 | 0 |
| 7.80.960 | 3 | 6.6 | 0.6% | 0 | 0 |