Gallagher Command Centre Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Gallagher Command Centre Server versions 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), and all versions of 8.90 and prior. This vulnerability arises from an uncaught exception, allowing an authorized and privileged operator to intentionally crash the Command Centre Server.

Impact

Exploitation of this vulnerability leads to a crash of the Command Centre Server, causing a denial-of-service condition.

Remediation

To reduce exposure to this vulnerability, ensure that appropriate privilege limitations have been placed on operators.