CVE-2024-41724

8.7 highEPSS 0.2%

High (8.7). EPSS 0.2% chance of exploitation in the next 30 days.

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affects all versions of Gallagher Command Centre prior to 9.20.1043.

Severity

CVSS 3.1

8.7 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2025-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-41724

Check your stack JSON