Gallagher Command Centre Server Improper Locking Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Gallagher Command Centre Server versions 9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), and all versions of 9.00 and prior. This vulnerability arises from improper locking in the Gallagher Morpho integration, allowing a privileged operator to cause a limited denial-of-service on the Command Centre Server.

Impact

Exploitation of this vulnerability leads to a limited denial-of-service on the Command Centre Server, causing disruption without crashing the server.