Vulnerability Description
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gallagher | Controller 7000 Firmware | >= 8.70, < 8.70.231204a |
| Gallagher | Controller 7000 | - |
Related Weaknesses (CWE)
References
- https://security.gallagher.com/Security-Advisories/CVE-2023-6355Vendor Advisory
- https://security.gallagher.com/Security-Advisories/CVE-2023-6355Vendor Advisory
FAQ
What is CVE-2023-6355?
CVE-2023-6355 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 ...
How severe is CVE-2023-6355?
CVE-2023-6355 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-6355?
Check the references section above for vendor advisories and patch information. Affected products include: Gallagher Controller 7000 Firmware, Gallagher Controller 7000.