What is the severity of CVE-2020-16096?

CVE-2020-16096 is classified as a high severity vulnerability due to unauthorized access to sensitive data.

How do I fix CVE-2020-16096?

To mitigate CVE-2020-16096, upgrade to Gallagher Command Centre version 8.10.1134, 8.00.1161, 7.90.991, or 7.80.960 or later.

What versions of Gallagher Command Centre are affected by CVE-2020-16096?

CVE-2020-16096 affects Gallagher Command Centre versions prior to 8.10.1134, 8.00.1161, 7.90.991, 7.80.960, and earlier versions.

What type of data can be accessed due to CVE-2020-16096?

Due to CVE-2020-16096, any operator account can access all data that would be replicated to a multi-server system.

Are all operator accounts affected by CVE-2020-16096?

Yes, all operator accounts have the potential to access sensitive data because of the vulnerability in CVE-2020-16096.

Vulnerability/
CVE-2020-16096

critical

9.9

CWE

285

15/9/2020

4/8/2024

CVE-2020-16096

First published: Tue Sep 15 2020(Updated: )

In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components.

Credit: disclosures@gallagher.com

Affected Software	Affected Version	How to fix
Gallagher Command Centre	>=7.80<7.80.960
Gallagher Command Centre	>=7.90<7.90.991
Gallagher Command Centre	>=8.00<8.00.1161
Gallagher Command Centre	>=8.10<8.10.1134
Gallagher Command Centre	=7.80.960
Gallagher Command Centre	=7.90.991
Gallagher Command Centre	=8.00.1161
Gallagher Command Centre	=8.10.1134

Never miss a vulnerability like this again

Reference Links

https://security.gallagher.com/Security-Advisories/CVE-2020-16096

Frequently Asked Questions

What is the severity of CVE-2020-16096?
CVE-2020-16096 is classified as a high severity vulnerability due to unauthorized access to sensitive data.
How do I fix CVE-2020-16096?
To mitigate CVE-2020-16096, upgrade to Gallagher Command Centre version 8.10.1134, 8.00.1161, 7.90.991, or 7.80.960 or later.
What versions of Gallagher Command Centre are affected by CVE-2020-16096?
CVE-2020-16096 affects Gallagher Command Centre versions prior to 8.10.1134, 8.00.1161, 7.90.991, 7.80.960, and earlier versions.
What type of data can be accessed due to CVE-2020-16096?
Due to CVE-2020-16096, any operator account can access all data that would be replicated to a multi-server system.
Are all operator accounts affected by CVE-2020-16096?
Yes, all operator accounts have the potential to access sensitive data because of the vulnerability in CVE-2020-16096.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/weakness
agent/references
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/gallagher
canonical/gallagher command centre
version/gallagher command centre/7.80
version/gallagher command centre/7.90
version/gallagher command centre/8.00
version/gallagher command centre/8.10
version/gallagher command centre/7.80.960
version/gallagher command centre/7.90.991
version/gallagher command centre/8.00.1161
version/gallagher command centre/8.10.1134

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.