CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-26348

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded into the registry of the Windows Server to obtain sensitive information. This issue affects: Gallagher Command Centre 8.60 versions prior to 8.60.1652; 8.50 versions prior to 8.50.2245; 8.40 versions prior to 8.40.2216; 8.30 versions prior to 8.30.1470; version 8.20 and prior versions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.4%

CVSS Severity

CVSS v3 Score 8.2

CVSS v2 Score 2.1

References

Products affected by CVE-2022-26348

Gallagher » Command Centre » Version: N/A

cpe:2.3:a:gallagher:command_centre:-
Gallagher » Command Centre » Version: 7.70

cpe:2.3:a:gallagher:command_centre:7.70
Gallagher » Command Centre » Version: 7.80

cpe:2.3:a:gallagher:command_centre:7.80
Gallagher » Command Centre » Version: 7.80.939

cpe:2.3:a:gallagher:command_centre:7.80.939
Gallagher » Command Centre » Version: 7.80.960

cpe:2.3:a:gallagher:command_centre:7.80.960
Gallagher » Command Centre » Version: 7.90

cpe:2.3:a:gallagher:command_centre:7.90
Gallagher » Command Centre » Version: 7.90.0

cpe:2.3:a:gallagher:command_centre:7.90.0
Gallagher » Command Centre » Version: 7.90.1038

cpe:2.3:a:gallagher:command_centre:7.90.1038
Gallagher » Command Centre » Version: 7.90.961

cpe:2.3:a:gallagher:command_centre:7.90.961
Gallagher » Command Centre » Version: 7.90.991

cpe:2.3:a:gallagher:command_centre:7.90.991
Gallagher » Command Centre » Version: 8.0

cpe:2.3:a:gallagher:command_centre:8.0
Gallagher » Command Centre » Version: 8.00

cpe:2.3:a:gallagher:command_centre:8.00
Gallagher » Command Centre » Version: 8.00.1128

cpe:2.3:a:gallagher:command_centre:8.00.1128
Gallagher » Command Centre » Version: 8.00.1161

cpe:2.3:a:gallagher:command_centre:8.00.1161
Gallagher » Command Centre » Version: 8.00.1228

cpe:2.3:a:gallagher:command_centre:8.00.1228
Gallagher » Command Centre » Version: 8.00.1252

cpe:2.3:a:gallagher:command_centre:8.00.1252
Gallagher » Command Centre » Version: 8.10

cpe:2.3:a:gallagher:command_centre:8.10
Gallagher » Command Centre » Version: 8.10.1092

cpe:2.3:a:gallagher:command_centre:8.10.1092
Gallagher » Command Centre » Version: 8.10.1134

cpe:2.3:a:gallagher:command_centre:8.10.1134
Gallagher » Command Centre » Version: 8.10.1211

cpe:2.3:a:gallagher:command_centre:8.10.1211
Gallagher » Command Centre » Version: 8.10.1253

cpe:2.3:a:gallagher:command_centre:8.10.1253
Gallagher » Command Centre » Version: 8.10.1284

cpe:2.3:a:gallagher:command_centre:8.10.1284
Gallagher » Command Centre » Version: 8.20

cpe:2.3:a:gallagher:command_centre:8.20
Gallagher » Command Centre » Version: 8.30

cpe:2.3:a:gallagher:command_centre:8.30
Gallagher » Command Centre » Version: 8.30.1236

cpe:2.3:a:gallagher:command_centre:8.30.1236
Gallagher » Command Centre » Version: 8.30.1299

cpe:2.3:a:gallagher:command_centre:8.30.1299
Gallagher » Command Centre » Version: 8.30.1359

cpe:2.3:a:gallagher:command_centre:8.30.1359
Gallagher » Command Centre » Version: 8.40.1888

cpe:2.3:a:gallagher:command_centre:8.40.1888
Gallagher » Command Centre » Version: 8.50

cpe:2.3:a:gallagher:command_centre:8.50
Gallagher » Command Centre » Version: 8.60

cpe:2.3:a:gallagher:command_centre:8.60

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-26348

Products

Pricing

Contact Us