Controller 6000 buffer overflow via upload feature in web interface
Priority MEDIUM 43CWE-120Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00496 42nd percentileScored 2026-11-07
Fix Fixed Controller 6000 (Gallagher): vCR8.80.230201a, vCR8.70.230201a, vCR8.60.230201b +1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Gallagher | Controller 6000 | before vCR8.80.230201a; before vCR8.70.230201a; before vCR8.60.230201b; before vCR8.50.230201a | vCR8.80.230201a, vCR8.70.230201a, vCR8.60.230201b, vCR8.50.230201a | Patch available | CNA |
- Controller 6000 VendorGallagher Affected before vCR8.80.230201a; before vCR8.70.230201a; before vCR8.60.230201b; before vCR8.50.230201a Fixed in vCR8.80.230201a, vCR8.70.230201a, vCR8.60.230201b, vCR8.50.230201a Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:gallagher:controller_6000_firmware:*:*:*:*:*:*:*:* | before 8.50.230201a; 8.60 to before 8.60.230201b; 8.70 to before 8.70.230201a; 8.80 to before 8.80.230201a | Vulnerable | Gallagher |
| cpe:2.3:h:gallagher:controller_6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Gallagher |
- cpe:2.3:o:gallagher:controller_6000_firmware:*:*:*:*:*:*:*:* Versions before 8.50.230201a; 8.60 to before 8.60.230201b; 8.70 to before 8.70.230201a; 8.80 to before 8.80.230201a Vulnerable ·Gallagher
- cpe:2.3:h:gallagher:controller_6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Gallagher
Remediation
- Fix · CNA Controller 6000 (Gallagher) Fixed in vCR8.80.230201a, vCR8.70.230201a, vCR8.60.230201b, vCR8.50.230201a
Timeline
- 2026-10-02 Threatist record created from CVE-2023-24584
- 2026-10-03 Alias added: GHSA-vhf5-75m6-7hjx
References
More Gallagher Controller 6000 Firmware vulnerabilities
- TI-2023-10208 A format string issue in the Controller 6000's optional diagnostic web interface can be… CVSS 3.1HIGH 8.8
- TI-2022-09545 Improper check for unusual conditions in Gallagher Controller 6000 CVSS 3.1HIGH 7.5
- TI-2023-22350 Sensitive information uncleared after debug/power state transition in the Controller 6000… CVSS 3.1MEDIUM 4.6
- TI-2023-08691 Improper input validation in Gallagher Controller 6000/ Controller 7000 CVSS 3.1MEDIUM 4.3
Sources
- CVE-2023-24584 · CVE Program
- CVE-2023-24584 · NVD
- FIRST EPSS
- GHSA-vhf5-75m6-7hjx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences