CVE-2024-21815

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users.

This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Mar 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-218165.5in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.CVE-2024-218186.7Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalatio CVE-2024-21826.5A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker CVE-2024-218207.2Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privil CVE-2024-218218.0Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute a CVE-2024-218237.5Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors CVE-2024-218245.3Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER I CVE-2024-218259.8A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Co CVE-2024-218265.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.CVE-2024-218277.2A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024 CVE-2024-218286.7Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated us CVE-2024-218297.5Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable esca