Controller 6000
Approved changes feed: RSS · Atom
cpe:2.3:a:gallagher:controller_6000:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gallagher (1a83fbe6-3e6e-58bd-a69d-5a0946535413) |
|---|---|
| Product | Controller 6000 (4a491622-67b4-5cf6-9893-fd940c0aa548) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41967 |
vulnerable | 2026-06-03 14:52:52.876142 |
Details available
LOW (2.4)
Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages.
This issue affects: Gallagher Controller 6000 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), v8.60 or earlier.
Published: 2023-12-18T22:00:38.751Z
Updated: 2024-08-02T19:09:49.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24590 |
vulnerable | 2026-06-03 14:49:30.202928 |
Details available
HIGH (7.5)
A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to a Denial of Service.
This issue affects: Gallagher Controller 6000 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.
Published: 2023-12-18T22:00:17.083Z
Updated: 2024-08-02T11:03:19.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24584 |
vulnerable | 2026-06-03 14:49:30.183883 |
Controller 6000 buffer overflow via upload feature in web interface
HIGH (7.5)
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature.
This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.
Published: 2023-06-01T04:08:35.754Z
Updated: 2025-01-10T18:47:07.773Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.