PT-2023-19692 · Unknown · Controller 6000

Published 2023-06-01 · Updated 2023-06-08 · CVE-2023-24584

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Controller 6000 versions prior to vCR8.80.230201a Controller 6000 versions prior to vCR8.70.230201a Controller 6000 versions prior to vCR8.60.230201b Controller 6000 versions prior to vCR8.50.230201a Controller 6000 versions vCR8.40 and prior

Description The issue is a buffer overflow via the Controller diagnostic web interface upload feature.

Recommendations For versions prior to vCR8.80.230201a, update to vCR8.80.230201a or later. For versions prior to vCR8.70.230201a, update to vCR8.70.230201a or later. For versions prior to vCR8.60.230201b, update to vCR8.60.230201b or later. For versions prior to vCR8.50.230201a, update to vCR8.50.230201a or later. For versions vCR8.40 and prior, update to a version later than vCR8.40.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-24584

Affected Products

Controller 6000

References · 4

• https://osv.dev/vulnerability/CVE-2023-24584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-24584 · Security Note
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584 · Vendor Advisory
• https://t.me/cvenotify/51539 · Telegram Post