CVE-2024-22383mediumCWE-772

CVE-2024-22383: medium-severity vulnerability in Gallagher Controller 7000

Published · Updated

Follow this CVE+ Monitor Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.2%
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service. This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Gallagher · Controller 7000
Related CVEs — Gallagher Controller 7000

In the same product, most dangerous first.

CVE-2023-6355MEDIUMCVE-2023-6355EPSS 0.4%CVE-2025-35983MEDIUMCVE-2025-35983EPSS 0.2%