CVE-2024-22387

External Control of Critical State Data CWE-642 in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in some circumstances could compromise site physical security controls. Gallagher...

CVE-2024-22387

creationtimestamp| type| source ---|---|--- 2024-07-11 05:46:28+00:00| seen| https://t.me/cvedetector/627...

CVE-2024-22387

CVE-2024-22387 affects Gallagher Controller 6000 and 7000 via the diagnostic web interface. An authenticated user can externally control critical state data to modify device I/O connections, causing unexpected behavior and potentially compromising site physical security controls. Affected version...