CVE-2023-23570:

5.4 CVSS

Description

Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior.

This issue affects: Gallagher Command Centre 8.90 prior to vEL8.90.1620 (MR2), all versions of 8.80 and prior.

Classification

CVE ID: CVE-2023-23570

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.4

Affected Products

Vendor: Gallagher

Product: Command Centre

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.07% (probability of being exploited)

EPSS Percentile: 34.34% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://security.gallagher.com/Security-Advisories/CVE-2023-23570

Timeline