AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-23155

CRITICAL · CVSS 9 EPSS 0.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-18 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.0. It affects Android.

CVE
CVE-2021-23155
Severity
CRITICAL
CVSS
9
EPSS
0.47%
Android

Original NVD Description

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2024-21838 MEDIUM CVE-2024-21815 CRITICAL CVE-2023-6355 MEDIUM CVE-2023-46686 MEDIUM CVE-2023-41967 LOW CVE-2023-24590 HIGH