Gallagher Command Centre Server Privilege Context Switching Error Vulnerability

A Privilege Context Switching Error (CWE-270) has been identified in Gallagher Command Centre Server. This vulnerability could allow a privileged Operator with high-level access in one Division to perform limited privileged activities across Division boundaries. The issue affects Command Centre Server versions 9.30 prior to 9.30.1874 (MR1), 9.20 prior to 9.20.2337 (MR3), 9.10 prior to 9.10.3194 (MR6), 9.00 prior to 9.00.3371 (MR7), and all versions of 8.90 and prior.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing Operators to perform restricted activities in other Divisions.