CVE-2021-23204: Gallagher Command Centre

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3).

Affected products

• Gallagher Command Centre: from 8.30, before 8.30.1359 (fixed in 8.30.1359); from 8.40, before 8.40.1888 (fixed in 8.40.1888)

Published 2021-06-11. Last modified 2026-06-17.