CVE-2021-23182: 
Gallagher Command Centre vulnerability analysis and mitigation

A Cleartext Storage of Sensitive Information in Memory vulnerability was identified in Gallagher Command Centre Server, tracked as CVE-2021-23182. The vulnerability affects Command Centre versions 8.40 prior to 8.40.1888 (MR3) and all versions of 8.30, allowing OSDP reader master keys to be discoverable in server memory dumps (Gallagher Advisory).

The vulnerability is rated as Medium severity with a CVSS v3.1 score configuration of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N. The issue specifically involves the exposure of OSDP reader master keys in server memory dumps, which could potentially be accessed by attackers with appropriate system access (Gallagher Advisory).

If exploited, this vulnerability could lead to the exposure of sensitive OSDP reader master keys, potentially compromising the security of affected systems. The vulnerability affects the confidentiality and integrity of the system, though availability is not impacted (Gallagher Advisory).

As of the advisory publication, there were no known instances of active exploitation of this vulnerability in the wild (Gallagher Advisory).

Sites not using OSDP readers are not impacted, and Command Centre versions prior to 8.30 are not affected. When transporting memory dumps, it is recommended to ensure it's done via a secure medium. A maintenance release (v8.40.1888-MR3) has been made available to address this vulnerability. The fix requires the Command Centre server to be upgraded (Gallagher Advisory).