Page 5 of 29 results (0.003 seconds)

CVSS: 9.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2020-16098

https://notcve.org/view.php?id=CVE-2020-16098

It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8.20 prior to v8.20.1166(MR3), versions of 8.10 prior to v8.10.1211(MR5), versions of 8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier. These credentials can then be used to encode low security cards to be used by the system where insecure card technologies are supported. Es posible enumerar las credenciales de la tarjeta de acceso por medio de una conexión de red no autenticada en el servidor en Command Center versiones v8.20 anteriores a v8.20.1166(MR3), versiones de 8.10 anteriores a v8.10.1211(MR5), versiones de 8.00 anteriores a v8.00.1228(MR6), todas las versiones de 7.90 y anteriores. Estas credenciales pueden ser usadas para codificar tarjetas de poca seguridad que puedan ser usadas por el sistema donde son admitidas tecnologías de tarjetas no seguras • https://security.gallagher.com/Security-Advisories/CVE-2020-16098 • CWE-287: Improper Authentication CWE-306: Missing Authentication for Critical Function •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2020-16100

https://notcve.org/view.php?id=CVE-2020-16100

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket (Configuration Client) connections. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier. Es posible que una conexión websocket DCOM remota no autenticada bloquee el hilo (o subproceso) del websocket DCOM del servicio Command Center debido a un cierre inapropiado de las conexiones websocket cerradas, impidiendo aceptar futuras conexiones websocket DCOM (Configuration Client). Las versiones afectadas son v8.20 anterior a v8.20.1166(MR3), v8.10 anterior a v8.10.1211(MR5), v8.00 anterior a v8.00.1228(MR6), todas las versiones de 7.90 y anteriores • https://security.gallagher.com/Security-Advisories/CVE-2020-16100 • CWE-404: Improper Resource Shutdown or Release •

CVSS: 7.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2020-16097

https://notcve.org/view.php?id=CVE-2020-16097

On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed in v8.10.1211(MR5)), v8.00 prior to vGR8.00.165 (Distributed in v8.00.1228(MR6)), v7.90 prior to vGR7.90.165 (distributed in v7.90.1038(MRX)), v7.80 or earlier, It is possible to retrieve site keys used for securing MIFARE Plus and Desfire using debug ports on T Series readers. En controladores que ejecutan versiones desde v8.20 anteriores a vCR8.20.200221b (distribuido en versión v8.20.1093(MR2)), versiones v8.10 anteriores a vGR8.10.179 (distribuido en versión v8.10.1211(MR5)), versiones v8.00 anteriores a vGR8 .00.165 (distribuido en versión v8.00.1228(MR6)), versiones v7.90 anteriores a vGR7.90.165 (distribuido en v7.90.1038(MRX)), versiones v7.80 o anteriores, es posible recuperar las claves del sitio usadas para proteger MIFARE Plus y Desfire por medio de puertos de depuración en lectores de la Serie T • https://security.gallagher.com/Security-Advisories/CVE-2020-16097 • CWE-522: Insufficiently Protected Credentials •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-16099

https://notcve.org/view.php?id=CVE-2020-16099

In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily hang or disconnect. En Gallagher Command Center versiones v8.20 anteriores a v8.20.1093(MR2) es posible crear eventos Guard Tour que cuando se accedían por medio de cosas como reportes causan que los clientes se cuelguen o desconecten temporalmente • https://security.gallagher.com/Security-Advisories/CVE-2020-16099 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2020-7215

https://notcve.org/view.php?id=CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event. Se detectó un problema en Gallagher Command Center versiones 7.x anteriores a 7.90.991(MR5), versiones 8.00 anteriores a 8.00.1161(MR5) y versiones 8.10 anteriores a 8.10.1134(MR4). Los datos de configuración del sistema externo (utilizados para integraciones de terceros, tales como los sistemas DVR) fueron registrados en el registro de eventos de Command Centre. • https://security.gallagher.com/cve-2020-7215 • CWE-532: Insertion of Sensitive Information into Log File •