CVE-2021-23146
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.
Una vulnerabilidad de comparación incompleta con factores ausentes en el controlador Gallagher permite a un atacante eludir la verificación PIV. Este problema afecta a: Gallagher Command Centre 8.40 versiones anteriores a 8.40.1888 (MR3); 8.30 versiones anteriores a 8.30.1359 (MR3); 8.20 versiones anteriores a 8.20.1259 (MR5); 8.10 versiones anteriores a 8.10.1284 (MR7); versión 8.00 y versiones anteriores
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-26 CVE Reserved
- 2021-11-18 CVE Published
- 2024-07-31 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-697: Incorrect Comparison
- CWE-1023: Incomplete Comparison with Missing Factors
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://security.gallagher.com/Security-Advisories/CVE-2021-23146 | 2022-10-07 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | <= 8.00 Search vendor "Gallagher" for product "Command Centre" and version " <= 8.00" | - |
Affected
| ||||||
Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.10 < 8.10.1284 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.10 < 8.10.1284" | - |
Affected
| ||||||
Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.20 < 8.20.1259 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.20 < 8.20.1259" | - |
Affected
| ||||||
Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.30 < 8.30.1359 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.30 < 8.30.1359" | - |
Affected
| ||||||
Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.40 < 8.40.1888 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.40 < 8.40.1888" | - |
Affected
|