CVE-2020-7215

5.5 mediumEPSS 0.3%

Medium (5.5) in gallagher command centre. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2020-01-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gallagher:command_centre

References

https://security.gallagher.com/cve-2020-7215
https://security.gallagher.com/cve-2020-7215

Check your stack JSON