PT-2025-10559 · Gallagher · Gallagher Command Centre

Published 2025-03-10 · Updated 2025-03-15 · CVE-2024-41724

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions prior to 9.20.1043

Description The issue is related to improper certificate validation, which allows an attacker to spoof the SALTO server. This can lead to unauthorized access.

Recommendations For versions prior to 9.20.1043, update to version 9.20.1043 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2024-41724

Affected Products

Gallagher Command Centre

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-41724 · Security Note
• https://twitter.com/cracbot/status/1900864628172927082 · Twitter Post
• https://twitter.com/CVEnew/status/1898935642614022357 · Twitter Post
• https://twitter.com/cracbot/status/1900502244434509912 · Twitter Post
• https://twitter.com/CveFindCom/status/1898932260780294381 · Twitter Post
• https://twitter.com/cracbot/status/1900139863812563393 · Twitter Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-41724 · Note
• https://t.me/cvedetector/19937 · Telegram Post
• https://t.me/cvenotify/114029 · Telegram Post
• https://t.me/cvetracker/18784 · Telegram Post