« Volver al listado

CVE-2019-19802

Estado: ModificadaMedia (6.5)—

In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Gallagher — Command Centre

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-19802",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-01-17T02:15:11.667",
  "references": [
    {
      "url": "https://security.gallagher.com/cve-2019-19802",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://security.gallagher.com/cve-2019-19802",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied."
    },
    {
      "lang": "es",
      "value": "En Gallagher Command Center Server versiones v8.10 anteriores a v8.10.1134(MR4), versiones v8.00 anteriores a v8.00.1161(MR5), versiones v7.90 anteriores a v7.90.991(MR5), versiones v7.80 anteriores a v7.80.960(MR2) y versión v7.70 o anteriores, un usuario autenticado que conecta con OPCUA puede visualizar todos los datos que se replicarían en una configuración multiservidor sin ser aplicadas comprobaciones de privilegios."
    }
  ],
  "lastModified": "2026-06-17T02:27:16.417",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F1560D6-CCAA-4FF6-A342-53F3BD108408",
              "versionEndExcluding": "7.70"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4005F0E6-ED18-4DBE-8FDC-F6F40853CE43",
              "versionEndExcluding": "7.80.960",
              "versionStartIncluding": "7.80"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6093704-EB1F-4B41-A9BA-EAF5EBBE86E1",
              "versionEndExcluding": "7.90.991",
              "versionStartIncluding": "7.90"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C8C50BE-CE33-47F5-87D7-72EC8A069C03",
              "versionEndExcluding": "8.00.1161",
              "versionStartIncluding": "8.00"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F25C56A-EFE0-407A-B682-E25C5665CAB5",
              "versionEndExcluding": "8.10.1134",
              "versionStartIncluding": "8.10"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:7.80.960:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10E5A085-2298-4DF7-B7FE-3BDC5D2701D3"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:7.90.991:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B374C701-59BA-4BDC-A2CD-5EE40A253746"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:8.00.1161:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BE2F182-7215-4A41-86F5-B8F6F307E779"
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:8.10.1134:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0676CE27-3D08-4619-89A6-7A17B37B3665"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}