Security Flaw in Gallagher Command Centre Diagnostics Service

CVE-2023-46686

What is CVE-2023-46686?

A security vulnerability has been identified in the Gallagher Command Centre Diagnostics Service that allows a privileged user to exploit insufficient validation of untrusted inputs. This flaw enables the configuration of the service to operate with less secure communication protocols, potentially exposing sensitive data and system integrity to risks. Affected versions include those prior to v1.3.0, distributed in 9.00.1507(MR1). To mitigate this issue, users are advised to ensure their systems are updated to the latest version and implement robust security practices.

References