Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Gallagher Controller 6000 and Controller 7000 vCR8.80.240816b, vCR8.90.240816a and 2 more versions Clear all filters
TI-2024-26725 CVE-2024-39808 · GHSA-9qcw-x77v-9qjh

Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000…

Priority LOW 21

Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to instigate a reboot leading to a denial of s…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00229 Published 2024-09-11 Fixed in vCR9.10.240816a, vCR9.00.240816a +2 CWE-131
TI-2024-16466 CVE-2024-24972 · GHSA-4wp7-grq3-cjq2

Buffer overflow in Gallagher Controller 6000 and Controller 7000

Priority LOW 29

Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot the Controller, causing a Denial of Servi…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00344 Published 2024-09-11 Fixed in vCR9.10.240816a, vCR9.00.240816a +2 CWE-120
TI-2024-15894 CVE-2024-23906 · GHSA-rfm5-7c79-8g98

Cross-site scripting in Gallagher Controller 6000 and Controller 7000

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller configuration during an authenticated Operator's…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00278 Published 2024-09-11 Fixed in vCR9.10.240816a, vCR9.00.240816a +2 CWE-79