CVE-2023-24590

Summary

CVE-2023-24590 refers to a format string vulnerability in the optional diagnostic web interface of Gallagher Controller 6000. This issue allows malicious actors to write and read memory, potentially crashing the Controller 6000, resulting in a Denial of Service. Affected versions include Gallagher Controller 6000 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), as well as all versions of 8.50 and older. Users are advised to apply the relevant software updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.