Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2024-22383

CVE-2024-22383

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service. This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher Controller 7000

Default version status: unaffected

  • 9.00 to < vCR9.00.231204baffected
  • 8.90 to < vCR8.90.240209baffected
  • 8.80 to < vCR8.80.240209aaffected
  • 8.70 to < vCR8.70.240209aaffected

References