CVE-2023-22439
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface.
This issue affects: Gallagher Controller 6000 and 7000 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.
Se puede utilizar una validación de entrada incorrecta de una solicitud HTTP grande en la interfaz web de diagnóstico opcional de Controller 6000 y Controller 7000 (puerto 80) para realizar una denegación de servicio de la interfaz web de diagnóstico. Este problema afecta a:
Gallagher Controller 6000 y 7000 8.90 antes de vCR8.90.231204a (distribuido en 8.90.1620 (MR2)),
8.80 antes de vCR8.80.231204a (distribuido en 8.80.1369 (MR3)),
8.70 antes de vCR8. 70.231204a (distribuido en 8.70.2375 (MR5)),
8.60 antes de vCR8.60.231116a (distribuido en 8.60.2550 (MR7)),
todas las versiones de 8.50 y anteriores.
*Credits:
Sebastian Toscano of Amazon Security, Kevin Schaller of Amazon Security
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-02-03 CVE Reserved
- 2023-12-18 CVE Published
- 2024-08-02 CVE Updated
- 2024-11-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://security.gallagher.com/Security-Advisories/CVE-2023-22439 | 2023-12-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gallagher Search vendor "Gallagher" | Controller 6000 Firmware Search vendor "Gallagher" for product "Controller 6000 Firmware" | <= 8.50 Search vendor "Gallagher" for product "Controller 6000 Firmware" and version " <= 8.50" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Controller 6000 Firmware Search vendor "Gallagher" for product "Controller 6000 Firmware" | >= 8.60 < 8.60.231116a Search vendor "Gallagher" for product "Controller 6000 Firmware" and version " >= 8.60 < 8.60.231116a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Controller 6000 Firmware Search vendor "Gallagher" for product "Controller 6000 Firmware" | >= 8.70 < 8.70.231204a Search vendor "Gallagher" for product "Controller 6000 Firmware" and version " >= 8.70 < 8.70.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Controller 6000 Firmware Search vendor "Gallagher" for product "Controller 6000 Firmware" | >= 8.80 < 8.80.231204a Search vendor "Gallagher" for product "Controller 6000 Firmware" and version " >= 8.80 < 8.80.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Controller 6000 Firmware Search vendor "Gallagher" for product "Controller 6000 Firmware" | >= 8.90 < 8.90.231204a Search vendor "Gallagher" for product "Controller 6000 Firmware" and version " >= 8.90 < 8.90.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | <= 8.50 Search vendor "Gallagher" for product "Command Centre" and version " <= 8.50" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | <= 8.50 Search vendor "Gallagher" for product "Command Centre" and version " <= 8.50" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 7000 Search vendor "Gallagher" for product "Controller 7000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.60 < 8.60.231116a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.60 < 8.60.231116a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.60 < 8.60.231116a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.60 < 8.60.231116a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 7000 Search vendor "Gallagher" for product "Controller 7000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.70 < 8.70.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.70 < 8.70.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.70 < 8.70.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.70 < 8.70.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 7000 Search vendor "Gallagher" for product "Controller 7000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.80 < 8.80.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.80 < 8.80.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.80 < 8.80.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.80 < 8.80.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 7000 Search vendor "Gallagher" for product "Controller 7000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.90 < 8.90.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.90 < 8.90.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 6000 Search vendor "Gallagher" for product "Controller 6000" | - | - |
Safe
|
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.90 < 8.90.231204a Search vendor "Gallagher" for product "Command Centre" and version " >= 8.90 < 8.90.231204a" | - |
Affected
| in | Gallagher Search vendor "Gallagher" | Controller 7000 Search vendor "Gallagher" for product "Controller 7000" | - | - |
Safe
|