Skip to content
OpenAdvisories
High · 7.5 CVE-2023-24584 EUVD-2023-28599GHSA-vhf5-75m6-7hjx

Controller 6000 buffer overflow via upload feature in web interface

Published Jun 1, 2023 · Updated Jan 10, 2025 · Assigned by Gallagher

Description

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature.

This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.

Affected products

VendorProductAffectedFixed
Gallagher Controller 6000 < vCR8.80.230201a, < vCR8.70.230201a, < vCR8.60.230201b, < vCR8.50.230201a vCR8.80.230201a

References