CVEvulnerability

CVE-2023-6355

6.8 MEDIUM Published 2023-12-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1253, CWE-863

Description

Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)).

Affected configurations

• gallagher controller 7000 firmware (>= 8.70 < 8.70.231204a) • gallagher controller 7000 firmware (>= 8.80 < 8.80.231204a) • gallagher controller 7000 firmware (>= 8.90 < 8.90.231204a) • gallagher controller 7000 firmware (>= 9.00 < 9.00.231204b)

Related

Weakness · CWE (2)

  • CWE-1253 Incorrect Selection of Fuse Values weakness
  • CWE-863 Incorrect Authorization weakness

References