description:
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug.
This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)).
problem types: CWE-1253: Incorrect Selection of Fuse Values
affected:
{
defaultStatus: unaffected
product: Controller 7000
vendor: Gallagher
versions:
lessThan: vCR9.00.231204b, status: affected, version: 9.00, versionType: custom
lessThan: vCR8.90.231204a, status: affected, version: 8.90, versionType: custom
lessThan: vCR8.80.231204a, status: affected, version: 8.80, versionType: custom
lessThan: vCR8.70.231204a, status: affected, version: 8.70, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL