Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of…

published 2023-12-18 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-46426

cvss: 2.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 24%
public exploits: 0; none known

Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages.

This issue affects: Gallagher Controller 6000 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), v8.60 or earlier.

Patch / fix

fixed in 1

Gallagher Controller 6000 vCR8.70.231204a

Exploit prediction

0.31% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	2.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD	3.1	4.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Gallagher Controller 6000

Classification

Weakness

CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

References

security.gallagher.com /Security-Advisories/CVE-2023-41967
vendor-advisory

Sources

CVE List CVE-2023-41967
NVD CVE-2023-41967

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary