CVE-2025-47147Disclosure(gallagher / command_centre_mobile)

LOWCVSS 5.7 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client versions prior to 9.40.123.

gallagher CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-47147

Weakness type (CWE)

CWE-312

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

command_centre_mobile

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

gallagher

Products

command_centre_mobile

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

CyberDudeBivash® | Global Cybersecurity Company@cyberbivash220d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-47147 - Command Centre Mobile Client Cleartext Storage of Sensitive Information Intel Report: https://ift.tt/2iKH3SQ
Post summary
Alert announces CVE-2025-47147, highlighting that the Command Centre Mobile Client stores sensitive data in cleartext.
0000088
342 followersView on X
Infoflowcloud@infoflowcloud220d
Disclosure
🚨*CVE* CVE-2025-47147 Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operato… https://www.cve.org/CVERecord?id=CVE-2025-47147 ----- Traducción: CVE-2025-47147 Alm… http://infoflow.cloud`
Post summary
The post announces CVE-2025-47147, describing a cleartext storage vulnerability in the Command Centre Mobile Client that could allow attackers with access to a logged‑in operator.
0000092
55 followersView on X
CVE@CVEnew220d
Disclosure
CVE-2025-47147 Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operato… https://www.cve.org/CVERecord?id=CVE-2025-47147
Post summary
The text announces CVE-2025-47147, a cleartext storage vulnerability in the Command Centre Mobile Client, but provides no evidence of exploitation, PoC, or patch.
00000280
56.6K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gallagher	command_centre_mobile	-	android	-
App	gallagher	command_centre_mobile	-	iphone_os	-

Explore more

Back to dashboard gallagher CVEs command_centre_mobile vulnerabilities