CVE-2024-22383
CVSS 3.1 Score 6.2 of 10 (medium)
Details
Summary
CVE-2024-22383 is a vulnerability affecting various versions of the Gallagher Controller 7000, including 9.00, 8.90, 8.80, and 8.70. This issue results from insufficient release of resources after their effective lifetime (CWE-772) in the Controller 7000, leading to HBUS connected T-Series readers becoming unresponsive following attacks over the RS-485 interface. Consequently, these readers fail to recover, causing a persistent denial of service. The vulnerability affects all pre-released versions prior to vCR9.00.231204b, vCR8.90.240209b, vCR8.80.240209a, and vCR8.70.240209a respectively.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.