Approved changes feed: RSS · Atom

cpe:2.3:a:gallagher:controller_7000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGallagher (1a83fbe6-3e6e-58bd-a69d-5a0946535413)
ProductController 7000 (4d4f15bb-50a9-5c27-a017-e17eb3f8945c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-35983 vulnerable 2026-06-03 15:00:52.276785 Details available
MEDIUM (6.5)
Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privileged overrides during the initial configuration of the Controller, there is no risk for Controllers once they are connected. This issue affects Controller 7000: 9.30 prior to vCR9.30.250624a (distributed in 9.30.1871 (MR1)).
Published: 2025-07-10T03:09:11.847Z
Updated: 2025-07-10T13:11:39.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22383 vulnerable 2026-06-03 14:55:00.577912 Details available
MEDIUM (6.2)
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service. This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).
Published: 2024-03-05T03:12:29.581Z
Updated: 2024-08-01T22:43:34.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6355 vulnerable 2026-06-03 14:53:51.555046 Details available
MEDIUM (6.8)
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)).
Published: 2023-12-18T21:55:58.148Z
Updated: 2024-08-02T08:28:21.793Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.