Improper Certificate Validation in Gallagher Command Centre Affects SALTO Integration
CVE-2024-41724

8.7HIGH

Key Information:

Vendor

Gallagher

Status
Command Centre Server
Vendor
CVE Published:
10 March 2025

What is CVE-2024-41724?

A vulnerability in the Gallagher Command Centre's integration with SALTO allows for improper certificate validation, enabling potential attackers to spoof the SALTO server. This flaw poses a risk as it can lead to unauthorized access or manipulation of security features. All versions of Gallagher Command Centre prior to 9.20.1043 are affected, highlighting the need for organizations to upgrade to mitigate the threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Command Centre Server 0

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.