Gallagher Controller 6000 and Controller 7000

Name: Gallagher Controller 6000 and Controller 7000
Brand: Gallagher

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-24972US	—	0.34% (28th)	—	vCR8.90.240816a	2024-09-11	5 versions
CVE-2024-41146US	—	0.32% (25th)	—	vCR9.00.241108a	2024-12-12	4 versions
CVE-2024-22387US	—	0.31% (23rd)	—	vCR8.90.240520a	2024-07-11	6 versions
CVE-2024-23906US	—	0.28% (20th)	—	vCR9.00.240816a	2024-09-11	5 versions
CVE-2024-39808US	—	0.23% (14th)	—	vCR9.10.240816a	2024-09-11	5 versions
CVE-2024-23485US	—	0.19% (8th)	—	vCR9.10.240520a	2024-07-11	6 versions
CVE-2024-23317US	—	0.17% (6th)	—	8.60	2024-07-11	6 versions

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1304Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-642External Control of Critical State Data1 CVEs
CWE-694Use of Multiple Resources with Duplicate Identifier1 CVEs
CWE-73External Control of File Name or Path1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.