Critical · published June 11, 2021
🚨 A sneaky SQL Injection can let any remote user with basic access tweak your Command Centre databases without a trace! 🔥 Think of it like a restaurant where a diner can slip a note to the chef with their own recipe substitutions — but instead of just changing their meal, they can alter the entire menu! This vulnerability means an attacker could modify critical data in your Command Centre databases, potentially leading to unauthorized access and manipulation of sensitive information. Imagine the chaos if someone could change security settings undetected! It’s absolutely devastating if left unaddressed!
Think of it like a restaurant where a diner can slip a note to the chef with their own recipe substitutions — but instead of just changing their meal, they can alter the entire menu! This SQL Injection flaw in the OPCUA interface allows low-privileged operators to execute malicious queries that modify or manipulate database entries, completely undermining data integrity.
This vulnerability means an attacker could modify critical data in your Command Centre databases, potentially leading to unauthorized access and manipulation of sensitive information. Imagine the chaos if someone could change security settings undetected! It’s absolutely devastating if left unaddressed! Immediately patch to Gallagher Command Centre versions 8.40.1888 (MR3), 8.30.1359 (MR3), 8.20.1259 (MR5), or 8.10.1284 (MR7), as applicable. Review and audit your database access controls to ensure only authorized changes can be made. Don’t wait! You’ve got this! Fixing this will make your Command Centre safer and your superhero status even more legendary! 🦸♂️🛡️