Gallagher Controller 7000 Improper Certificate Validation Vulnerability Allowing Denial-of-Service and Privileged Overrides

A vulnerability exists in Gallagher's Controller 7000 OneLink implementation due to improper certificate validation. This issue could enable an unprivileged attacker to cause a limited denial-of-service or to perform privileged overrides during the initial configuration of the Controller. Once the Controller is connected, this vulnerability no longer poses a risk. The issue affects Controller 7000 versions 9.30 prior to vCR9.30.250624a, which was distributed in 9.30.1871 (MR1).

Impact

Exploitation of this vulnerability could lead to a limited denial-of-service or unauthorized privileged overrides during the initial configuration of the affected Controller.