CVE-2024-23485

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-23485
Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow free access.  This issue affects: Gallagher Controller 6000 and 7000 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)),  8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.

4.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://security.gallagher.com/Security-Advisories/CVE-2024-23485
https://security.gallagher.com/Security-Advisories/CVE-2024-23485
Configurations

No configuration.

History

21 Nov 2024, 08:57

Type Values Removed Values Added
References () https://security.gallagher.com/Security-Advisories/CVE-2024-23485 - () https://security.gallagher.com/Security-Advisories/CVE-2024-23485 -

11 Jul 2024, 13:05

Type Values Removed Values Added
Summary
  • (es) La integridad preservada inadecuadamente del estado de configuración del hardware durante una operación de ahorro/restauración de energía (CWE-1304) en el controlador 6000 y 7000 puede provocar que puertas cerradas seguras conectadas a través de concentradores de comunicación Aperio permitan momentáneamente el libre acceso. Este problema afecta a: Gallagher Controller 6000 y 7000 9.10 antes de vCR9.10.240520a (distribuido en 9.10.1268(MR1)), 9.00 antes de vCR9.00.240521a (distribuido en 9.00.1990(MR3)), 8.90 antes de vCR8. 90.240520a (distribuido en 8.90.1947 (MR4)), 8.80 antes de vCR8.80.240520a (distribuido en 8.80.1726 (MR5)), 8.70 antes de vCR8.70.240520a (distribuido en 8.70.2824 (MR7)), todos Versiones de 8.60 y anteriores.

11 Jul 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-11 03:15

Updated : 2024-11-21 08:57

NVD link : CVE-2024-23485

Mitre link : CVE-2024-23485

CVE.ORG link : CVE-2024-23485

JSON object : View

Products Affected

No product.

CWE
CWE-1304

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation