8.80

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-18	CVE-2023-22439	Improper Input Validation vulnerability in Gallagher Command Centre and Controller 6000 Firmware Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface. This issue affects: Gallagher Controller 6000 and 7000 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior. network low complexity gallagher CWE-20	4.3
2023-06-01	CVE-2023-24584	Classic Buffer Overflow vulnerability in Gallagher Controller 6000 Firmware Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. network low complexity gallagher CWE-120 critical	9.8