C6
Product
Controller 6000 and Controller 7000
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Controller 6000 and Controller 7000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-24972 | 6.5 | Sep 11 | Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot… Affected: through 8.70; 9.10 before vCR9.10.240816a; 9.00 before vCR9.00.240816a; 8.90 before vCR8.90.240816a; 8.80 before vCR8.80.240816b |
| CVE-2024-23906 | 6.1 | Sep 11 | Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller… Affected: through 8.70; 9.10 before vCR9.10.240816a; 9.00 before vCR9.00.240816a; 8.90 before vCR8.90.240816a; 8.80 before vCR8.80.240816b |
| CVE-2024-41146 | 4.6 | Dec 12 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS… Affected: through 8.80; 9.10 before vCR9.10.241108a; 9.00 before vCR9.00.241108a; 8.90 before vCR8.90.241107a |
| CVE-2024-39808 | 4.6 | Sep 11 | Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to Controller wiring to… Affected: through 8.70; 9.10 before vCR9.10.240816a; 9.00 before vCR9.00.240816a; 8.90 before vCR8.90.240816a; 8.80 before vCR8.80.240816b |
Showing 4