{"id":"CVE-2023-24584","state":"PUBLISHED","title":"Controller 6000 buffer overflow via upload feature in web interface","description":"\nController 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. \n\n\n\n\nThis issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.\n\n","publishedAt":"2023-06-01T04:08:35.754Z","updatedAt":"2025-01-10T18:47:07.773Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"Gallagher"},"assigner":"Gallagher","products":["Gallagher Controller 6000"],"affected":[{"vendor":"Gallagher","product":"Controller 6000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"vCR8.80.230201a","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.70.230201a","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.60.230201b","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.50.230201a","versionType":"custom"}]}],"references":["https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/24xxx/CVE-2023-24584.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-24584","state":"PUBLISHED","datePublished":"2023-06-01T04:08:35.754Z","dateUpdated":"2025-01-10T18:47:07.773Z","assignerShortName":"Gallagher","assignerOrgId":"0c426f27-3ee1-4eff-be88-288d5a1822bc","dateReserved":"2023-02-03T20:38:05.230Z"},"containers":{"cna":{"title":"Controller 6000 buffer overflow via upload feature in web interface","descriptions":[{"lang":"en","value":"\nController 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. \n\n\n\n\nThis issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.\n\n"}],"affected":[{"vendor":"Gallagher","product":"Controller 6000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"vCR8.80.230201a","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.70.230201a","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.60.230201b","versionType":"custom"},{"version":"0","status":"affected","lessThan":"vCR8.50.230201a","versionType":"custom"}]}],"references":[{"url":"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","lang":"en","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","type":"CWE"}]}],"providerMetadata":{"shortName":"Gallagher","orgId":"0c426f27-3ee1-4eff-be88-288d5a1822bc","dateUpdated":"2023-06-01T04:08:35.754Z"},"workarounds":[{"lang":"en","value":"\nEnsure dipswitch 1 is turned off on all Controllers and the option, \"Dipswitch 1 controls the diagnostic web interface\", is not checked in Configuration Client on Controller property pages. Do not use the Controller override, \"Enable WWW Connections\". Refer to the Gallagher Command Centre Hardening Guide for more details.\n\n\n","supportingMedia":[{"type":"text/html","base64":false,"value":"\n\n<span style=\"background-color: rgb(255, 255, 255);\">Ensure dipswitch 1 is turned off on all Controllers and the option, \"Dipswitch 1 controls the diagnostic web interface\", is not checked in Configuration Client on Controller property pages. Do not use the Controller override, \"Enable WWW Connections\". Refer to the Gallagher Command Centre Hardening Guide for more details.</span>\n\n<br>"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T11:03:18.735Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-10T18:46:54.400796Z","id":"CVE-2023-24584","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-10T18:47:07.773Z"}}]}}}