Vulnerabilities > Gallagher > Controller 6000 Firmware > 8.50.220303a

DATE CVE VULNERABILITY TITLE RISK
2023-12-18 CVE-2023-41967 Improper Cross-boundary Removal of Sensitive Data vulnerability in Gallagher Controller 6000 Firmware
Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages.
low complexity
gallagher CWE-212
4.6
4.6
2023-06-01 CVE-2023-24584 Classic Buffer Overflow vulnerability in Gallagher Controller 6000 Firmware
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature.
network
low complexity
gallagher CWE-120
critical
 9.8
9.8