CVE-2020-16099 : Exploit Details and Defense Strategies

Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) allows the creation of Guard Tour events that can lead to temporary client hang or disconnection.

Understanding CVE-2020-16099

In Gallagher Command Centre v8.20, a vulnerability exists that can cause client disruptions when accessing certain Guard Tour events.

What is CVE-2020-16099?

The vulnerability in Gallagher Command Centre v8.20 allows the creation of problematic Guard Tour events that may result in client hang-ups or disconnections.

The Impact of CVE-2020-16099

The impact of this vulnerability is rated as MEDIUM with a CVSS base score of 4.3. It has a low attack complexity and vector, affecting availability with no impact on confidentiality or integrity.

Technical Details of CVE-2020-16099

Gallagher Command Centre v8.20 vulnerability details.

Vulnerability Description

The vulnerability allows the creation of Guard Tour events that can cause temporary client hang or disconnection when accessed through reporting.

Affected Systems and Versions

Product: Command Centre
Vendor: Gallagher
Versions Affected: < 8.20.1093(MR2)

Exploitation Mechanism

The vulnerability can be exploited by creating specific Guard Tour events that trigger client disruptions.

Mitigation and Prevention

Protect your systems from CVE-2020-16099.

Immediate Steps to Take

Update to version v8.20.1093(MR2) or later to mitigate the vulnerability.
Monitor system behavior for any signs of client hang-ups or disconnections.

Long-Term Security Practices

Regularly update and patch Gallagher Command Centre to prevent vulnerabilities.
Educate users on safe practices to minimize the risk of exploitation.

Patching and Updates

Apply security patches and updates provided by Gallagher to address CVE-2020-16099.