VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jul 11, 2024· Updated Apr 15, 2026

CVE-2024-23317

CVE-2024-23317

Description

External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution.

This issue affects: 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gallagher/Controller 6000/ Controller 7000llm-fuzzy
    Range: 8.70 < vCR8.70.240520a, 8.80 < vCR8.80.240520a, 8.90 < vCR8.90.240520a, 9.00 < vCR9.00.240521a, 9.10 < vCR9.10.240520a, all 8.60 and prior
  • Gallagher/Controller 7000llm-fuzzy
    Range: 8.70 < vCR8.70.240520a, 8.80 < vCR8.80.240520a, 8.90 < vCR8.90.240520a, 9.00 < vCR9.00.240521a, 9.10 < vCR9.10.240520a, all 8.60 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.