Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-35983

Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of service or perform privileged overrides during the initial configuration of the Controller, there is no risk for Controllers once they are connected. This issue affects Controller 7000: 9.30 prior to vCR9.30.250624a (distributed in 9.30.1871 (MR1)).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher Controller 7000

Default version status: unaffected

  • 9.30 to < vCR9.30.250624aaffected

References