CVE-2024-21815

MEDIUM 6.5CVE-2024-21815 · Published 05/03/2024 · updated 17/06/2026

In short

CVE-2024-21815 is a MEDIUM (CVSS 6.5) vulnerability affecting command centre (gallagher).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 26.8% of all vulnerabilities.
Fix: update to 8.70.2526, 8.80.1526, 8.90.1751, 9.00.1774 or later.

Package	Affected versions	Patched versions
command centre gallagher	`≥ 8.70, < 8.70.2526≥ 8.80, < 8.80.1526≥ 8.90, < 8.90.1751≥ 9.00, < 9.00.1774≤ 8.60`	`8.70.25268.80.15268.90.17519.00.1774`

Description

Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.

References

security.gallagher.com/Security-Advisories/CVE-2024-21815 · Vendor Advisory

More vulnerabilities in command centre

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command centre

gallagher

≥ 8.70, < 8.70.2526≥ 8.80, < 8.80.1526≥ 8.90, < 8.90.1751≥ 9.00, < 9.00.1774≤ 8.60

8.70.25268.80.15268.90.17519.00.1774

Description

More vulnerabilities in command centre

See all →