VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2024/23xxx/CVE-2024-23317.json
T

372 lines
16 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-23317",
"assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
"state": "PUBLISHED",
"assignerShortName": "Gallagher",
"dateReserved": "2024-02-05T04:16:47.971Z",
"datePublished": "2024-07-11T02:39:28.129Z",
"dateUpdated": "2024-08-01T22:59:32.128Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "Controller 6000 and Controller 7000",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "8.60",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "vCR9.10.240520a",
"status": "affected",
"version": "9.10",
"versionType": "custom"
},
{
"lessThanOrEqual": "vCR9.00.240521a",
"status": "affected",
"version": "9.00",
"versionType": "custom"
},
{
"lessThanOrEqual": "vCR8.90.240520a",
"status": "affected",
"version": "8.90",
"versionType": "custom"
},
{
"lessThanOrEqual": "vCR8.80.240520a",
"status": "affected",
"version": "8.80",
"versionType": "custom"
},
{
"lessThanOrEqual": "vCR8.70.240520a",
"status": "affected",
"version": "8.70",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n<p>External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution. </p><p><b>This issue affects:</b>&nbsp;9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior.</p>\n\n<p></p>"
}
],
"value": "External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution. \n\nThis issue affects: 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-73",
"description": "CWE-73 External Control of File Name or Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
"shortName": "Gallagher",
"dateUpdated": "2024-07-11T02:39:28.129Z"
},
"references": [
{
"url": "https://security.gallagher.com/Security-Advisories/CVE-2024-23317"
}
],
"source": {
"discovery": "INTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
},
"adp": [
{
"affected": [
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "8.60",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:8.70:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.70",
"status": "affected",
"lessThan": "8.70.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:8.80:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.80",
"status": "affected",
"lessThan": "8.80.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:8.90:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.90",
"status": "affected",
"lessThan": "8.90.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:9.00:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "9.00",
"status": "affected",
"lessThan": "9.00.240521a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_6000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_6000_firmware:9.10:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "9.10",
"status": "affected",
"lessThan": "9.10.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "8.60",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:8.70:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.70",
"status": "affected",
"lessThan": "8.70.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:8.80:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.80",
"status": "affected",
"lessThan": "8.80.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:8.90:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "8.90",
"status": "affected",
"lessThan": "8.90.240520a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:9.00:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "9.00",
"status": "affected",
"lessThan": "9.00.240521a",
"versionType": "custom"
}
]
},
{
"vendor": "gallagher",
"product": "controller_7000_firmware",
"cpes": [
"cpe:2.3:o:gallagher:controller_7000_firmware:9.10:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "9.10",
"status": "affected",
"lessThan": "9.10.240520a",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-07-11T14:25:33.804644Z",
"id": "CVE-2024-23317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-07-12T15:48:05.316Z"
}
},
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T22:59:32.128Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://security.gallagher.com/Security-Advisories/CVE-2024-23317",
"tags": [
"x_transferred"
]
}
]
}
]
}
}
View Git Blame Copy Permalink