CVE-2021-23193: Gallagher Command Centre

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ; 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; 8.20 versions prior to 8.20.1291 (MR6); version 8.10 and prior versions.

Affected products

  • Gallagher Command Centre: up to and including 8.10; from 8.20, before 8.20.1291 (fixed in 8.20.1291); from 8.30, before 8.30.1454 (fixed in 8.30.1454); from 8.40, before 8.40.2063 (fixed in 8.40.2063); from 8.50, before 8.50.2048 (fixed in 8.50.2048)

Published 2021-11-18. Last modified 2026-06-17.