CVE-2019-12492

EUVD-2019-4088
Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
gallaghercommand_centre
𝑥
< 7.80.939
gallaghercommand_centre
7.90.0 ≤
𝑥
< 7.90.961
gallaghercommand_centre
8.0 ≤
𝑥
< 8.00.1128
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.gallagher.com/CVE-2019-12492
https://security.gallagher.com/security-advisories
https://security.gallagher.com/CVE-2019-12492
https://security.gallagher.com/security-advisories