Login Request a demo
C6
Product
Controller 6000 Firmware
by Gallagher · last CVE Dec 18, 2023
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Controller 6000 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24584
9.8
0%
Jun 1
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature
Affected: before 8.50.230201a; 8.60 before 8.60.230201b; 8.70 before 8.70.230201a; 8.80 before 8.80.230201a
CVE-2023-24590
8.8
1%
Dec 18
A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to…
Affected: through 8.50; 8.60 before 8.60.231116a
CVE-2022-26078
7.5
1%
Jul 6
Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address
Affected: 8.30 before 8.30.220303a; 8.40 before 8.40.220303a; 8.50 before 8.50.220303a; 8.60 before 8.60.220303a
CVE-2023-41967
4.6
0%
Dec 18
Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic…
Affected: through 8.60; 8.70 before 8.70.231204a
CVE-2023-22439
4.3
1%
Dec 18
Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service…
Affected: through 8.50; 8.60 before 8.60.231116a; 8.70 before 8.70.231204a; 8.80 before 8.80.231204a; 8.90 before 8.90.231204a
Showing 5