CVE-2020-16096

In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components.

CVSS v3 7.7 HIGH
CVSS v2.0 4.0 MEDIUM

7.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.1 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://security.gallagher.com/Security-Advisories/CVE-2020-16096	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gallagher:command_centre::::::::
	cpe:2.3:a:gallagher:command_centre::::::::
	cpe:2.3:a:gallagher:command_centre::::::::
	cpe:2.3:a:gallagher:command_centre::::::::
	cpe:2.3:a:gallagher:command_centre:7.80.960:-::::::
	cpe:2.3:a:gallagher:command_centre:7.90.991:-::::::
	cpe:2.3:a:gallagher:command_centre:8.00.1161:-::::::
	cpe:2.3:a:gallagher:command_centre:8.10.1134:-::::::

History

No history.

Information

Published : 2020-09-15 14:15

Updated : 2020-09-24 14:22

NVD link : CVE-2020-16096

Mitre link : CVE-2020-16096

CVE.ORG link : CVE-2020-16096

JSON object : View

Products Affected

gallagher

command_centre

CWE

NVD-CWE-noinfo CWE-285

Improper Authorization

{"id": "CVE-2020-16096", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}, {"type": "Secondary", "source": "disclosures@gallagher.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2020-09-15T14:15:13.613", "references": [{"url": "https://security.gallagher.com/Security-Advisories/CVE-2020-16096", "tags": ["Vendor Advisory"], "source": "disclosures@gallagher.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "disclosures@gallagher.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components."}, {"lang": "es", "value": "Gallagher Command Center versiones 8.10 anteriores a 8.10.1134(MR4), versiones 8.00 anteriores a 8.00.1161(MR5), versiones 7.90 anteriores a 7.90.991(MR5), versiones 7.80 anteriores a 7.80.960(MR2), versiones 7.70 y anteriores, cualquier cuenta de operador presenta acceso a todos los datos que son replicados si el sistema estuviera (o est\u00e1) conectado a un entorno de varios servidores. Esto puede incluir credenciales de texto plano para sistemas DVR y detalles de tarjetas usados para componentes de acceso f\u00edsico/alarma/per\u00edmetro"}], "lastModified": "2020-09-24T14:22:34.577", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4005F0E6-ED18-4DBE-8FDC-F6F40853CE43", "versionEndExcluding": "7.80.960", "versionStartIncluding": "7.80"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6093704-EB1F-4B41-A9BA-EAF5EBBE86E1", "versionEndExcluding": "7.90.991", "versionStartIncluding": "7.90"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C8C50BE-CE33-47F5-87D7-72EC8A069C03", "versionEndExcluding": "8.00.1161", "versionStartIncluding": "8.00"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F25C56A-EFE0-407A-B682-E25C5665CAB5", "versionEndExcluding": "8.10.1134", "versionStartIncluding": "8.10"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:7.80.960:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10E5A085-2298-4DF7-B7FE-3BDC5D2701D3"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:7.90.991:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B374C701-59BA-4BDC-A2CD-5EE40A253746"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.00.1161:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BE2F182-7215-4A41-86F5-B8F6F307E779"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.10.1134:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0676CE27-3D08-4619-89A6-7A17B37B3665"}], "operator": "OR"}]}], "sourceIdentifier": "disclosures@gallagher.com"}