Read the docs
TI-2023-10208 Aliases CVE-2023-24590GHSA-273h-28gx-8f5j

A format string issue in the Controller 6000's optional diagnostic web interface can be…

Priority LOW 39CWE-134Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-134 and the CVSS impact.

Summary

A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to a Denial of Service. This issue affects: Gallagher Controller 6000 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.

Why it matters now

EPSS 0.00606 49th percentileScored 2026-11-07
Fix Fixed Controller 6000 (Gallagher): 8.60.231116a

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
GallagherController 6000up to 8.50; 8.60 to before 8.60.231116a8.60.231116aPatch availableCNA
  • Controller 6000 VendorGallagher Affected up to 8.50; 8.60 to before 8.60.231116a Fixed in 8.60.231116a Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:gallagher:controller_6000_firmware:*:*:*:*:*:*:*:*up to 8.50; 8.60 to before 8.60.231116aVulnerableGallagher
cpe:2.3:h:gallagher:controller_6000:-:*:*:*:*:*:*:*not specified by NVDRunning onGallagher
  • cpe:2.3:o:gallagher:controller_6000_firmware:*:*:*:*:*:*:*:* Versions up to 8.50; 8.60 to before 8.60.231116a Vulnerable ·Gallagher
  • cpe:2.3:h:gallagher:controller_6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Gallagher

Remediation

  • Fix · CNA Controller 6000 (Gallagher) Fixed in 8.60.231116a

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-24590
  2. 2026-10-03 Alias added: GHSA-273h-28gx-8f5j

References

Advisory 1

  • TI-2023-10202 Controller 6000 buffer overflow via upload feature in web interface CVSS 3.1CRITICAL 9.8
  • TI-2022-09545 Improper check for unusual conditions in Gallagher Controller 6000 CVSS 3.1HIGH 7.5
  • TI-2023-22350 Sensitive information uncleared after debug/power state transition in the Controller 6000… CVSS 3.1MEDIUM 4.6
  • TI-2023-08691 Improper input validation in Gallagher Controller 6000/ Controller 7000 CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences