Improper Certificate Validation in Gallagher Command Centre Affects SALTO Integration
CVE-2024-41724

8.7HIGH

Key Information:

Vendor

Gallagher

Status
Command Centre Server
Vendor
CVE Published:
10 March 2025

What is CVE-2024-41724?

A vulnerability in the Gallagher Command Centre's integration with SALTO allows for improper certificate validation, enabling potential attackers to spoof the SALTO server. This flaw poses a risk as it can lead to unauthorized access or manipulation of security features. All versions of Gallagher Command Centre prior to 9.20.1043 are affected, highlighting the need for organizations to upgrade to mitigate the threat.

Affected Version(s)

Command Centre Server 0

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.
CVE-2024-41724 : Improper Certificate Validation in Gallagher Command Centre Affects SALTO Integration