CVE-2023-6355mediumCWE-1253

CVE-2023-6355: medium-severity vulnerability in Gallagher Controller 7000

Published · Updated

Follow this CVE+ Monitor Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.4%
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)).
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Gallagher · Controller 7000
Related CVEs — Gallagher Controller 7000

In the same product, most dangerous first.

CVE-2025-35983MEDIUMCVE-2025-35983EPSS 0.2%CVE-2024-22383MEDIUMCVE-2024-22383EPSS 0.2%