What is CVE-2023-41967?

CVE-2023-41967 is a low-severity vulnerability in Gallagher Controller 6000, classified under CWE-1272. CVSS score: 2.4/10. Published 2023-12-18.

How severe is CVE-2023-41967?

Low severity. CVSS v3 base score is 2.4 out of 10.

Vulnerability in Gallagher Controller 6000

CVE-2023-41967

Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its conf…

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Gallagher Controller 6000 — versions 0, 8.70
Gallagher Controller_6000
Gallagher Controller_6000_firmware

Weakness classification (CWE)

CWE-1272
CWE-212 — Improper Removal of Sensitive Information Before Storage or Transfer

References

disclosures@gallagher.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-41967?: CVE-2023-41967 is a low-severity vulnerability in Gallagher Controller 6000, classified under CWE-1272. CVSS score: 2.4/10. Published 2023-12-18.
How severe is CVE-2023-41967?: Low severity. CVSS v3 base score is 2.4 out of 10.