Buffer overflow

2023-06-0105:15:00

PRIOn knowledge base

www.prio-n.com

controller 6000

buffer overflow

vulnerability

web interface

upload

nvd

diagnostic

versions

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature.

This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.

CPENameOperatorVersion
controller_6000_firmwareeq< 8.50.230201a
controller_6000_firmwarege8.60
controller_6000_firmwarelt8.60.230201
controller_6000_firmwarege8.70
controller_6000_firmwarelt8.70.230201
controller_6000_firmwarege8.80
controller_6000_firmwarelt8.80.230201

Name	Operator	Version
controller_6000_firmware	eq	< 8.50.230201a
controller_6000_firmware	ge	8.60
controller_6000_firmware	lt	8.60.230201
controller_6000_firmware	ge	8.70
controller_6000_firmware	lt	8.70.230201
controller_6000_firmware	ge	8.80
controller_6000_firmware	lt	8.80.230201

References

security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584