CVE-2021-23155: Gallagher Command Centre Mobile Client

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions.

Affected products

• Gallagher Command Centre Mobile Client: up to and including 8.50; from 8.60, before 8.60.065 (fixed in 8.60.065)

Published 2021-11-18. Last modified 2026-06-17.