CVE-2024-24972

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24972
Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated operator to reboot the Controller, causing a Denial of Service. Gallagher recommend the diagnostic web page is not enabled (default is off) unless advised by Gallagher Technical support. This interface is intended only for diagnostic purposes. This issue affects: Controller 6000 and Controller 7000 9.10 prior to vCR9.10.240816a (distributed in 9.10.1530 (MR2)), 9.00 prior to vCR9.00.240816a (distributed in 9.00.2168 (MR4)), 8.90 prior to vCR8.90.240816a (distributed in 8.90.2155 (MR5)), 8.80 prior to vCR8.80.240816b (distributed in 8.80.1938 (MR6)), all versions of 8.70 and prior.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-24972
Configurations

No configuration.

History

11 Sep 2024, 16:26

Type Values Removed Values Added
Summary
  • (es) La copia de búfer sin comprobar el tamaño de la entrada (CWE-120) en la interfaz web de diagnóstico del Controller 6000 y el Controller 7000 permite que un operador autorizado y autenticado reinicie el Controller, lo que provoca una denegación de servicio. Gallagher recomienda que la página web de diagnóstico no esté habilitada (la opción predeterminada está desactivada) a menos que lo indique el soporte técnico de Gallagher. Esta interfaz está destinada únicamente a fines de diagnóstico. Este problema afecta a: Controller 6000 y Controller 7000 9.10 anterior a vCR9.10.240816a (distribuido en 9.10.1530 (MR2)), 9.00 anterior a vCR9.00.240816a (distribuido en 9.00.2168 (MR4)), 8.90 anterior a vCR8.90.240816a (distribuido en 8.90.2155 (MR5)), 8.80 anterior a vCR8.80.240816b (distribuido en 8.80.1938 (MR6)), todas las versiones de 8.70 y anteriores.

11 Sep 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-11 04:15

Updated : 2024-09-11 16:26

NVD link : CVE-2024-24972

Mitre link : CVE-2024-24972

CVE.ORG link : CVE-2024-24972

JSON object : View

Products Affected

No product.

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')