CVE-2023-23576

4.3 mediumEPSS 0.3%

Medium (4.3) in gallagher command centre. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-696
Published: 2023-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gallagher:command_centre

References

https://security.gallagher.com/Security-Advisories/CVE-2023-23576
https://security.gallagher.com/Security-Advisories/CVE-2023-23576

Check your stack JSON