CVE-2025-47699 — AI Deep Analysis Summary

🚨 **Essence**: Sensitive system info exposure in Gallagher Morpho integration. <br>💥 **Consequences**: Unauthorized critical changes to building infrastructure.…

🛡️ **Root Cause**: **CWE-497** (Exposure of Sensitive System Information to Unauthorized Actors). Flaw lies in the Morpho integration layer leaking critical data.

🏢 **Affected**: Gallagher Command Centre Server. <br>📉 **Versions**: <br>• 9.30 to vEL9.30.2482 <br>• 9.20 to vEL9.20.2819 <br>• 9.10 to vEL9.10.3672 <br>• 9.00 to vEL9.0

🕵️ **Hacker Actions**: <br>• Access sensitive system info. <br>• Make **unauthorized critical changes**. <br>• Potentially compromise building security systems.

🔑 **Threshold**: **Medium**. Requires **Local Privileges** (PR:L). Not remote unauthenticated (AV:N/AC:L), but needs some access level.

💣 **Public Exp?**: **No**. The `pocs` field is empty. No public PoC or wild exploitation confirmed yet.

🔍 **Self-Check**: <br>• Scan for **Gallagher Command Centre Server**. <br>• Verify installed version against the affected list. <br>• Check Morpho integration logs for info leaks.

🩹 **Fix**: **Yes**. Official advisory released. Update to the specific fixed versions listed in the vendor security page.

🚧 **No Patch?**: <br>• Restrict access to Morpho integration components. <br>• Implement strict network segmentation. <br>• Monitor for unauthorized configuration changes.

⚡ **Urgency**: **High**. CVSS Score indicates **Critical** impact (H/H/H). Even with auth requirement, the potential for critical infrastructure damage is severe. Patch immediately!