← Back to browse · API

CVE-2021-23230

Severity
CRITICAL
CVSS
9.9
EPSS
0.0066
Risk score
39.83
CISA KEV
No
PoC
No
Published
2021-06-11
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2021-10331, GHSA-3XRP-CM65-F8F5
Products
Gallagher:Command Centre 8.10 <8.10.1284 (MR7), Gallagher:Command Centre 8.20 <8.20.1259 (MR5), Gallagher:Command Centre 8.30 <8.30.1359 (MR3), Gallagher:Command Centre 8.40 <8.40.1888 (MR3), Gallagher:Command Centre unspecified ≤8.00
Sources
euvd EUVD-2021-10331

Description

A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.

References