Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

gallagher / controller_6000 CVEs

Beta · best-effort

5 CVEs tagged to gallagher / controller_6000 — 0 Critical, 3 High, 0 Medium, 2 Low, 0 Unrated.

See this archive with more filters Back to gallagher vendor archive

CVE-2023-41967

Published Dec 18, 2023

Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic pass…

CVSS 2.4 · Low

Vendor/product tagsBeta · best-effort

CVE-2023-24590

Published Dec 18, 2023

A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2023-22439

Published Dec 18, 2023

Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service…

CVSS 3.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2023-24584

Published Jun 1, 2023

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, bef…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-26078

Published Jul 6, 2022

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1