We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-23485



AssignerGallagher
Reserved2024-02-05
Published2024-07-11
Updated2024-08-01

Description

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow free access.  This issue affects: Gallagher Controller 6000 and 7000 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)),  8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.



MEDIUM: 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Problem types

CWE-1304 Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation

Product status

Default status
affected

9.10 before vCR9.10.240520a
affected

9.00 before vCR9.00.240521a
affected

8.90 before vCR8.90.240520a
affected

8.80 before vCR8.80.240520a
affected

8.70 before vCR8.70.240520a
affected

Any version
affected

References

https://security.gallagher.com/Security-Advisories/CVE-2024-23485

cve.org CVE-2024-23485

nvd.nist.gov CVE-2024-23485

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.