Gallagher Controller 6000

• CVE-2023-41967 Low 2.4 Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical ac 0.3%
• CVE-2023-24590 High 7.5 A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to a Denial of Servic 0.6%
• CVE-2023-24584 High 7.5 Controller 6000 buffer overflow via upload feature in web interface 0.5%