CVE-2023-23576
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-23576
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不正确的行为次序
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gallagher Command Centre 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gallagher Command Centre是新西兰Gallagher公司的一款用于Gallagher门禁系统的集中控制工具。 Gallagher Command Centre Server存在安全漏洞，该漏洞源于Command Centre Server 中的不正确行为顺序可能会导致特权用户在网络中断后获得对站点的物理访问时间比预期的时间长。以下产品和版本受到影响：Gallagher Command Centre vEL8.90.1620 (MR2) 之前版本、vEL8.80.1369 (MR3)
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gallagher | Command Centre Server | 0 ~ 8.50 | - |
II. Public POCs for CVE-2023-23576
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-23576
请登录查看更多情报信息。
Same Patch Batch · Gallagher · 2023-12-18 · 8 CVEs total
| CVE-2023-24590 | 7.5 HIGH | Gallagher Controller 6000 格式化字符串错误漏洞 |
| CVE-2023-6355 | 6.8 MEDIUM | Gallagher Controller 7000 安全漏洞 |
| CVE-2023-46686 | 5.5 MEDIUM | Gallagher Command Centre 安全漏洞 |
| CVE-2023-23570 | 5.4 MEDIUM | Gallagher Command Centre 安全漏洞 |
| CVE-2023-23584 | 4.3 MEDIUM | Gallagher Command Centre 安全漏洞 |
| CVE-2023-22439 | 3.1 LOW | Gallagher Controller 6000 输入验证错误漏洞 |
| CVE-2023-41967 | 2.4 LOW | Gallagher Controller 6000 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2023-23576
No comments yet