Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-24584

Controller 6000 buffer overflow via upload feature in web interface

Description

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher Controller 6000

Default version status: unaffected

  • 0 to < vCR8.80.230201aaffected
  • 0 to < vCR8.70.230201aaffected
  • 0 to < vCR8.60.230201baffected
  • 0 to < vCR8.50.230201aaffected

References