CVE-2024-23485: Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks…

Medium severity · published Jul 11, 2024

CVE-2024-23485

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks…

4.6

CVSS

0.2%

EPSS

On KEV

Description

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow free access. This issue affects: Gallagher Controller 6000 and 7000 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vector

Physical

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 8% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Controller 6000 and Controller 7000 · Gallagher

9.10 before vCR9.10.240520a; 9.00 before vCR9.00.240521a; 8.90 before vCR8.90.240520a; 8.80 before vCR8.80.240520a; 8.70 before vCR8.70.240520a; through 8.60 · source: vendor

Affected product

Controller 6000 and Controller 7000

Gallagher

All Controller 6000 and Controller 7000 CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-23485

CVE.org

https://www.cve.org/CVERecord?id=CVE-2024-23485

security.gallagher.com

https://security.gallagher.com/Security-Advisories/CVE-2024-23485

More from Controller 6000 and Controller 7000

6.8

CVE-2024-22387

External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections…

6.5

CVE-2024-24972

Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot…

6.3

CVE-2024-23317

External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code…

6.1

CVE-2024-23906

Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller…

4.6

CVE-2024-41146

Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS…