Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Gallagher Component: Controller 6000 Firmware Clear all filters
TI-2023-22350 CVE-2023-41967 · GHSA-g2fv-w76j-v7p7

Sensitive information uncleared after debug/power state transition in the Controller 6000…

Priority LOW 21

Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controlle…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00311 Published 2023-12-18 Fixed in vCR8.70.231204a CWE-1272
TI-2023-08691 CVE-2023-22439 · GHSA-4jpc-fv5p-mh98

Improper input validation in Gallagher Controller 6000/ Controller 7000

Priority LOW 21

Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00512 Published 2023-12-18 Fixed in vCR8.90.231204a, vCR8.80.231204a +2 CWE-20
TI-2023-10202 CVE-2023-24584 · GHSA-vhf5-75m6-7hjx

Controller 6000 buffer overflow via upload feature in web interface

Priority MEDIUM 43

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00496 Published 2023-06-01 Fixed in vCR8.80.230201a, vCR8.70.230201a +2 CWE-120