description: An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.
problem types: CWE-1023
affected:
{
product: Command Center
vendor: Gallagher
versions:
status: affected, version: 8.40 prior to 8.40.1888 (MR3)
status: affected, version: 8.30 prior to 8.30.1359 (MR3)
status: affected, version: 8.20 prior to 8.20.1259 (MR5)
status: affected, version: 8.10 prior to 8.10.1284 (MR7)
status: affected, version: 8.00 and prior
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
version: 3.1
]