CVE-2024-22383

6.2 mediumEPSS 0.2%

Medium (6.2). EPSS 0.2% chance of exploitation in the next 30 days.

Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service. This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).

Severity

CVSS 3.1

6.2 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2024-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-22383
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-22383

Check your stack JSON