6.5

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gallagher ≫ Command Centre Version < 7.70
Gallagher ≫ Command Centre Version >= 7.80 < 7.80.960
Gallagher ≫ Command Centre Version >= 7.90 < 7.90.991
Gallagher ≫ Command Centre Version >= 8.00 < 8.00.1161
Gallagher ≫ Command Centre Version >= 8.10 < 8.10.1134
Gallagher ≫ Command Centre Version 7.80.960 Update -
Gallagher ≫ Command Centre Version 7.90.991 Update -
Gallagher ≫ Command Centre Version 8.00.1161 Update -
Gallagher ≫ Command Centre Version 8.10.1134 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.75% 0.502
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://security.gallagher.com/cve-2019-19802
Vendor Advisory