A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions before 8.40.1888 (MR3); 8.30 versions before 8.30.1359 (MR3); 8.20 versions before 8.20.1259 (MR5); 8.10 versions before 8.10.1284 (MR7); version 8.00 and prior versions.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gallagher command centre |
||
gallagher command centre 8.10.1284 |
||
gallagher command centre 8.20.1259 |
||
gallagher command centre 8.30.1359 |
||
gallagher command centre 8.40.1888 |