Description (CNA)
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Gallagher / Command Centre | affected unspecified through 7.90; affected 8.20 before 8.20.1166 (MR3); affected 8.10 before 8.10.1211 (MR5); affected 8.00 before 8.00.1228 (MR6) |
CWE
CWE-805
References
ADP enrichment
No English description supplied.