Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3v3q-fq2w-23r5

Опубликовано: 23 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices.

This issue affects Command Centre Server:

9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices.

This issue affects Command Centre Server:

9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

EPSS

Процентиль: 14%
0.00045
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 9.9
nvd
около 2 месяцев назад

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

CVSS3: 7.8
fstec
6 месяцев назад

Уязвимость службы обновления Windows Update Service операционных систем Microsoft Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 14%
0.00045
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-497