CVE-2020-16097

State: Published
Severity: 7.3 High
Published: Sep 15, 2020
Updated: Aug 4, 2024
Reserved: Jul 28, 2020

Description

On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed in v8.10.1211(MR5)), v8.00 prior to vGR8.00.165 (Distributed in v8.00.1228(MR6)), v7.90 prior to vGR7.90.165 (distributed in v7.90.1038(MRX)), v7.80 or earlier, It is possible to retrieve site keys used for securing MIFARE Plus and Desfire using debug ports on T Series readers.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	Gallagher

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
Command CentreGallagher	vGR7.80 and earlierAffected vCR8.20 to before vCR8.20.200221bAffected 8.10 to before vGR8.10.179Affected 8.00 to before vGR8.00.165Affected 7.90 to before vGR7.90.1038Affected

References

https://security.gallagher.com/Security-Advisories/CVE-2020-16097

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.