CVE-2020-16101

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.
Configurations

Configuration 1

cpe:2.3:a:gallagher:command_centre:8.20.1166:-:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:8.10.1211:-:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:8.00.1228:-:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*

Information

Published : 2020-09-15 02:15

Updated : 2020-09-24 05:27


NVD link : CVE-2020-16101

Mitre link : CVE-2020-16101

Products Affected
No products.
CWE
CWE-125

Out-of-bounds Read