CVE-2024-22383 Denial of service in Controller 7000
Attackers can cause persistent denial of service on Gallagher Controller 7000 devices by exploiting resource leaks over the RS-485 interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22383?
CVE-2024-22383 is a medium-severity denial of service vulnerability in Gallagher Controller 7000, published on 5 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service.
This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).
Weakness: CWE-772
Which versions are affected by CVE-2024-22383?
How do I fix CVE-2024-22383?
No fix has been published for CVE-2024-22383 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-22383 being exploited?
There is no known exploitation of CVE-2024-22383 in the wild and no public exploit code.
Sources
Also known as GHSA-53fj-qqg7-vmgv.