CVE-2019-19802

Published: Jan 17, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.

Affected (9)

Products: Gallagher: Command Centre

Gallagher

1 product

Command Centre

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Gallagher Command Centre	Before 7.70
Gallagher Command Centre	From 7.80 to 7.80.960
Gallagher Command Centre	From 7.90 to 7.90.991
Gallagher Command Centre	From 8.00 to 8.00.1161
Gallagher Command Centre	From 8.10 to 8.10.1134
Gallagher Command Centre	Version 7.80.960
Gallagher Command Centre	Version 7.90.991
Gallagher Command Centre	Version 8.00.1161
Gallagher Command Centre	Version 8.10.1134

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.gallagher.com/cve-2019-19802

Source: cve@mitre.org

Vendor Advisory

https://security.gallagher.com/cve-2019-19802

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.