C6
Product
Controller 6000 Firmware
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Controller 6000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24584 | 9.8 | Jun 1 | Controller 6000 buffer overflow via upload feature in web interface Affected: before 8.50.230201a; 8.60 before 8.60.230201b; 8.70 before 8.70.230201a; 8.80 before 8.80.230201a |
| CVE-2023-24590 | 8.8 | Dec 18 | A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to… Affected: through 8.50; 8.60 before 8.60.231116a |
| CVE-2022-26078 | 7.5 | Jul 6 | Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address Affected: 8.30 before 8.30.220303a; 8.40 before 8.40.220303a; 8.50 before 8.50.220303a; 8.60 before 8.60.220303a |
| CVE-2024-23317 | 6.3 | Jul 11 | External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code… Affected: through 8.60; 8.70 before 8.70.240520a; 8.80 before 8.80.240520a; 8.90 before 8.90.240520a; 9.00 before 9.00.240521a; 9.10 before 9.10.240520a |
| CVE-2023-41967 | 4.6 | Dec 18 | Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic… Affected: through 8.60; 8.70 before 8.70.231204a |
| CVE-2023-22439 | 4.3 | Dec 18 | Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service… Affected: through 8.50; 8.60 before 8.60.231116a; 8.70 before 8.70.231204a; 8.80 before 8.80.231204a; 8.90 before 8.90.231204a |
Showing 6