CVE-2020-16103

HIGH
8.8
CVSS Score
Published: December 14, 2020 at 07:34 PM UTC
Updated: June 17, 2026 at 02:57 AM UTC
1 product affected across 1 vendorCommand Centre

Using Command Centre by Gallagher?

Get instant alerts when new vulnerabilities affect Command Centre - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 2%

Description

Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); version 8.00 and prior versions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≤ 8.008.10 ≤ v < 8.10.12118.10 ≤ v < 8.10.1211(MR5)8.20 ≤ v < 8.20.11668.20 ≤ v < 8.20.1166(MR3)8.30 ≤ v < 8.30.12368.30 ≤ v < 8.30.1236(MR1)8.108.10.12118.10.1211 maintenance_release58.208.20.11668.20.1166 maintenance_release38.308.30.12368.30.1236 maintenance_release1
Affected range stops below 8.10.1211, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.10.1211(MR5), so it looks safe — our inference, not a vendor statement
Affected range stops below 8.20.1166, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.20.1166(MR3), so it looks safe — our inference, not a vendor statement
Affected range stops below 8.30.1236, so it looks safe — our inference, not a vendor statement
Affected range stops below 8.30.1236(MR1), so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

8.8HIGHGallagher
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-704CWE-843

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card