CVE-2021-23205CWE-116

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware…

High · published June 11, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00871 · 58.4th percentile
Weakness
CWE-116 · Improper Encoding or Escaping of Output
Published
2021-06-11T15:46Z
EPSS history
Timeline
  • 11 JUN 15:46Z
    Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware…
    cvelistv5