CVE-2020-16101

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-805 CWE-125

Affected software

Vendor	Product	Versions
Gallagher	Command Centre	>= unspecified, <= 7.90; >= 8.20, < 8.20.1166 (MR3); >= 8.10, < 8.10.1211 (MR5); >= 8.00, < 8.00.1228 (MR6)

References

https://security.gallagher.com/Security-Advisories/CVE-2020-16101Vendor Advisory
https://security.gallagher.com/Security-Advisories/CVE-2020-16101Vendor Advisory

Timeline

Published: Sep 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-161028.2Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with inva CVE-2020-161038.8Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. This CVE-2020-161047.2SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Int CVE-2020-16116.5A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device rece CVE-2020-161163.3In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory trav CVE-2020-161175.9In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an in CVE-2020-161187.5In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sen CVE-2020-161197.8Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_CVE-2020-161204.4Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user names CVE-2020-161213.3PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that CVE-2020-161227.8PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the co CVE-2020-161234.7An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from