CVE-2022-26078

Published: Jul 6, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30 versions prior to 220303a.

Affected (4)

Products: Gallagher: Controller 6000 Firmware

Gallagher

1 product

Controller 6000 Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gallagher Controller 6000 Firmware	From 8.30 to 8.30.220303a
Gallagher Controller 6000 Firmware	From 8.40 to 8.40.220303a
Gallagher Controller 6000 Firmware	From 8.50 to 8.50.220303a
Gallagher Controller 6000 Firmware	From 8.60 to 8.60.220303a

Running on/with	Platform Versions
Gallagher Controller 6000	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://security.gallagher.com/Security-Advisories/CVE-2022-26078

Source: disclosures@gallagher.com

Vendor Advisory

https://security.gallagher.com/Security-Advisories/CVE-2022-26078

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.