CVE-2020-16103
14.12.2020, 20:15
Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); version 8.00 and prior versions.
| Vendor | Product | Version |
|---|---|---|
| gallagher | command_centre | 𝑥 ≤ 8.00 |
| gallagher | command_centre | 8.10 ≤ 𝑥 < 8.10.1211 |
| gallagher | command_centre | 8.20 ≤ 𝑥 < 8.20.1166 |
| gallagher | command_centre | 8.30 ≤ 𝑥 < 8.30.1236 |
| gallagher | command_centre | 8.10.1211 |
| gallagher | command_centre | 8.10.1211:maintenance_release5 |
| gallagher | command_centre | 8.20.1166 |
| gallagher | command_centre | 8.20.1166:maintenance_release3 |
| gallagher | command_centre | 8.30.1236 |
| gallagher | command_centre | 8.30.1236:maintenance_release1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-704 - Incorrect Type Conversion or CastThe software does not correctly convert an object, resource, or structure from one type to a different type.
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.