CVE-2020-7215

MEDIUM

Gallagher Command Centre <7.90.991, 8.00<8.00.1161, 8.10<8.10.1134 - Sensitive Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://security.gallagher.com/cve-2020-7215

Scores

CVSS v3 5.5
EPSS 0.0030
EPSS Percentile 21.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-532
Status published
Products (4)
gallagher/command_centre 7.90.991
gallagher/command_centre 8.00.1161
gallagher/command_centre 8.10.1134
gallagher/command_centre < 7.80
Published Jan 20, 2020
Tracked Since Feb 18, 2026