← Back

Gallagher

gallagher

44 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Command Centre
command_centre
37 CVEs
Controller 6000 Firmware
controller_6000_firmware
5 CVEs
Command Centre Mobile Client
command_centre_mobile_client
1 CVE
Command Centre Mobile Connect
command_centre_mobile_connect
1 CVE
Controller 7000 Firmware
controller_7000_firmware
1 CVE
Controller 6000
controller_6000
0 CVEs
Controller 7000
controller_7000
0 CVEs

CVEs (44)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-19802
1Gallagher
1Command Centre
Jun 17, 2026
Jan 17, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OP...Show more
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.Show less
CVE-2019-19801
1Gallagher
1Command Centre
Jun 17, 2026
Jan 17, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authen...Show more
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.Show less
CVE-2019-15294
1Gallagher
1Command Centre
Jun 17, 2026
Aug 28, 2019
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows username and password fo...Show more
An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows username and password for this service are logged in cleartext to the Command_centre.log file.Show less
CVE-2019-12492
1Gallagher
1Command Centre
Jun 17, 2026
Jun 6, 2019
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.