CVE-2021-23197CWE-428

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the…

Medium · published November 18, 2021

CVSS v3.1
5.2
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ;

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2021-11-18T18:01Z
EPSS history
Timeline
  • 18 NOV 18:01Z
    Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the…
    cvelistv5