Tag: disclosures@gallagher.com

0 Attack Reports | 12 Vulnerabilities

Vulnerabilities

CVE-2024-41724

8.7
    Gallagher Command Centre SALTO integration
  • Version(s): before 9.20.1043
Published: March 10, 2025

CVE-2024-42407

8.5
    Command Centre Server
  • Version(s): 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior
Published: December 12, 2024

CVE-2024-43690

8.0
    Command Centre Server
  • Version(s): 9.10 prior to vEL9.10.1530 (MR2), 9.00 prior to vEL9.00.2168 (MR4), 8.90 prior to vEL8.90.2155 (MR5), 8.80 prior to vEL8.80.1938 (MR6), all versions of 8.70 and prior
    Command Centre Workstations
  • Version(s): 9.10 prior to vEL9.10.1530 (MR2), 9.00 prior to vEL9.00.2168 (MR4), 8.90 prior to vEL8.90.2155 (MR5), 8.80 prior to vEL8.80.1938 (MR6), all versions of 8.70 and prior
Published: September 11, 2024

CVE-2024-43107

7.2
    Gallagher Milestone Integration Plugin (MIP)
  • Version(s): 4.0.32, 3.0 and prior
Published: March 10, 2025

CVE-2024-22387

6.8
    Gallagher Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7))
    Gallagher Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7))
Published: July 11, 2024

CVE-2024-24972

6.5
    Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior
    Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior
Published: September 11, 2024

CVE-2024-23317

6.3
    Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240520a
    Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240520a
Published: July 11, 2024

CVE-2024-23906

6.1
    Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2))
    Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior
Published: September 11, 2024

CVE-2024-23485

4.6
    Gallagher Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior
    Gallagher Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior
Published: July 11, 2024

CVE-2024-39808

4.6
    Controller 6000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2))
    Controller 7000
  • Version(s): 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2))
    Controller 6000
  • Version(s): 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4))
    Controller 7000
  • Version(s): 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4))
    Controller 6000
  • Version(s): 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5))
    Controller 7000
  • Version(s): 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5))
    Controller 6000
  • Version(s): 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6))
    Controller 7000
  • Version(s): 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6))
    Controller 6000
  • Version(s): 8.70 and prior
    Controller 7000
  • Version(s): 8.70 and prior
Published: September 11, 2024

CVE-2024-41146

4.6
    Controller 6000
  • Version(s): 9.10 prior to vCR9.10.241108a (distributed in 9.10.2149 (MR4)), 9.00 prior to vCR9.00.241108a (distributed in 9.00.2374 (MR5)), 8.90 prior to vCR8.90.241107a (distributed in 8.90.2356 (MR6)), all versions of 8.80 and prior
    Controller 7000
  • Version(s): 9.10 prior to vCR9.10.241108a (distributed in 9.10.2149 (MR4)), 9.00 prior to vCR9.00.241108a (distributed in 9.00.2374 (MR5)), 8.90 prior to vCR8.90.241107a (distributed in 8.90.2356 (MR6)), all versions of 8.80 and prior
Published: December 12, 2024

CVE-2024-23194

3.3
    Gallagher Command Centre
  • Version(s): 9.10, prior to vEL9.10.1268 (MR1)
Published: July 11, 2024
Click here to see more Vulnerabilities