CVE-2021-23205 - CERT CVE
ID CVE-2021-23205
Sažetak Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.
Reference
CVSS
Base: 8.5
Impact: 9.2
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE COMPLETE COMPLETE
CVSS vektor AV:N/AC:L/Au:S/C:N/I:C/A:C
Zadnje važnije ažuriranje 22-06-2021 - 14:50
Objavljeno 11-06-2021 - 16:15