Improper Certificate Validation in Gallagher Milestone Integration Plugin
CVE-2024-43107

7.2HIGH

Key Information:

Vendor

Gallagher

Status
Milestone Integration Plugin
Vendor
CVE Published:
10 March 2025

What is CVE-2024-43107?

The Gallagher Milestone Integration Plugin (MIP) is exposed to a vulnerability due to improper certificate validation, allowing the acceptance of unauthenticated messages. This flaw can result in alarm events being sent to the Plugin without proper verification, posing a significant security risk. The plugin versions affected include v4.0 prior to v4.0.32 and all versions of v3.0 and prior. Users are advised to update to the latest version to safeguard against potential exploits.

Affected Version(s)

Milestone Integration Plugin 4.0

Milestone Integration Plugin 4.0 < 4.0.32

Milestone Integration Plugin 0 <= 3.0

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.