← CVE Intelligence

CVE-2024-23317

Gallagher / Controller 6000 and Controller 7000 PUBLISHED

Description (CNA)

External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution. This issue affects: 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.

Affected (CNA)

Vendor / productVersions
Gallagher / Controller 6000 and Controller 7000affected 0 before 8.60; affected 9.10 through vCR9.10.240520a; affected 9.00 through vCR9.00.240521a; affected 8.90 through vCR8.90.240520a; affected 8.80 through vCR8.80.240520a; affected 8.70 through vCR8.70.240520a

CWE

CWE-73

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.