Access Card Credential Enumeration Vulnerability in Gallagher Command Centre
CVE-2020-16098

9.8CRITICAL

Key Information:

Vendor

Gallagher

Status
Command Centre
Vendor
CVE Published:
15 September 2020

What is CVE-2020-16098?

A vulnerability exists in Gallagher Command Centre that allows unauthorized users to enumerate access card credentials through unauthenticated network connections. This affects several versions of the software, enabling attackers to exploit this weakness and potentially encode low-security access cards. The issue arises in versions 8.20 before 8.20.1166, 8.10 before 8.10.1211, 8.00 before 8.00.1228, and all versions of 7.90 and earlier, posing significant risks in environments that utilize insecure card technologies.

Affected Version(s)

Command Centre <= 7.90

Command Centre 8.20 < 8.20.1166(MR3)

Command Centre 8.10 < 8.10.1211(MR5)

References

https://security.gallagher.com/Security-Advisories/CVE-20...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.