What is CVE-2024-43107?

CVE-2024-43107 is a high-severity vulnerability in Gallagher Milestone Integration Plugin, classified under Improper Certificate Validation. CVSS score: 7.2/10. Published 2025-03-10.

How severe is CVE-2024-43107?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Gallagher Milestone Integration Plugin

CVE-2024-43107

Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP) permits unauthenticated messages (e.g. alarm events) to be sent to the Plugin. This issue effects Gallagher MIPS Plugin v4.0 prior to v4.0.32, al…

Vulnerability class: Improper Certificate Validation

EPSS: 0.002 (7.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L.

Affected products

Gallagher Milestone Integration Plugin — versions 4.0, 0

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

disclosures@gallagher.com

Frequently asked questions

What is CVE-2024-43107?: CVE-2024-43107 is a high-severity vulnerability in Gallagher Milestone Integration Plugin, classified under Improper Certificate Validation. CVSS score: 7.2/10. Published 2025-03-10.
How severe is CVE-2024-43107?: High severity. CVSS v3 base score is 7.2 out of 10.