CVE-2024-41724

CVSS 8.7 HIGHEPSS 0.2%CWE-295

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affects all versions of Gallagher Command Centre prior to 9.20.1043.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Productos afectados

Gallagher · Command Centre Server

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-41724