CVE-2023-22439

MEDIUM 4.3CVE-2023-22439 · Published 18/12/2023 · updated 17/06/2026

In short

CVE-2023-22439 is a MEDIUM (CVSS 4.3) vulnerability affecting command centre (gallagher).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.7% of all vulnerabilities.
Fix: update to 8.60.231116a, 8.70.231204a, 8.80.231204a, 8.90.231204a or later.

Package	Affected versions	Patched versions
command centre gallagher	`≥ 8.60, < 8.60.231116a≥ 8.70, < 8.70.231204a≥ 8.80, < 8.80.231204a≥ 8.90, < 8.90.231204a≤ 8.50`	`8.60.231116a8.70.231204a8.80.231204a8.90.231204a`

Description

Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface. This issue affects: Gallagher Controller 6000 and 7000 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.

References

security.gallagher.com/Security-Advisories/CVE-2023-22439 · Vendor Advisory

More vulnerabilities in command centre

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command centre

gallagher

≥ 8.60, < 8.60.231116a≥ 8.70, < 8.70.231204a≥ 8.80, < 8.80.231204a≥ 8.90, < 8.90.231204a≤ 8.50

8.60.231116a8.70.231204a8.80.231204a8.90.231204a

Description

More vulnerabilities in command centre

See all →