Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Gallagher Controller 6000 and Controller 7000 vCR8.70.240520a, vCR8.80.240520a and 3 more versions Clear all filters
TI-2024-14962 CVE-2024-22387 · GHSA-wq95-4r5j-p4x4

External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller…

Priority LOW 30

External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in s…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00306 Published 2024-07-11 Fixed in vCR9.10.240520a, vCR9.00.240521a +3 CWE-642
TI-2024-15529 CVE-2024-23485 · GHSA-gwpc-v2jm-gv2g

Improperly Preserved Integrity of Hardware Configuration State During a Power…

Priority LOW 20

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to mo…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00186 Published 2024-07-11 Fixed in vCR9.10.240520a, vCR9.00.240521a +3 CWE-1304