CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2020-16100
https://notcve.org/view.php?id=CVE-2020-16100
15 Sep 2020 — It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket (Configuration Client) connections. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier. Es posible que una conexión websocket DCOM remota no autenticada bloquee el hilo (o ... • https://security.gallagher.com/Security-Advisories/CVE-2020-16100 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.3EPSS: 0%CPEs: 8EXPL: 0CVE-2020-16097
https://notcve.org/view.php?id=CVE-2020-16097
15 Sep 2020 — On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed in v8.10.1211(MR5)), v8.00 prior to vGR8.00.165 (Distributed in v8.00.1228(MR6)), v7.90 prior to vGR7.90.165 (distributed in v7.90.1038(MRX)), v7.80 or earlier, It is possible to retrieve site keys used for securing MIFARE Plus and Desfire using debug ports on T Series readers. En controladores que ejecutan versiones desde v8.20 anteriores a vCR8.20.200221b (distribuido... • https://security.gallagher.com/Security-Advisories/CVE-2020-16097 • CWE-522: Insufficiently Protected Credentials •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-16099
https://notcve.org/view.php?id=CVE-2020-16099
15 Sep 2020 — In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily hang or disconnect. En Gallagher Command Center versiones v8.20 anteriores a v8.20.1093(MR2) es posible crear eventos Guard Tour que cuando se accedían por medio de cosas como reportes causan que los clientes se cuelguen o desconecten temporalmente • https://security.gallagher.com/Security-Advisories/CVE-2020-16099 • CWE-20: Improper Input Validation •