Login Request a demo
Medium severity · published Sep 11, 2024
CVE-2024-39808
Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to…
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to instigate a reboot leading to a denial of service. This issue affects: Controller 6000 and Controller 7000 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
Controller 6000 and Controller 7000 · Gallagher
through 8.70; 9.10 before vCR9.10.240816a; 9.00 before vCR9.00.240816a; 8.90 before vCR8.90.240816a; 8.80 before vCR8.80.240816b · source: vendor
Affected product
C6
Controller 6000 and Controller 7000
Gallagher
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-39808
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-39808
security.gallagher.com
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-39808
More from Controller 6000 and Controller 7000
6.8
CVE-2024-22387
External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections…
6.5
CVE-2024-24972
Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot…
6.3
CVE-2024-23317
External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code…
6.1
CVE-2024-23906
Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller…
4.6
CVE-2024-41146
Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS…