Is CVE-2023-22439 actively exploited?

No active exploitation of CVE-2023-22439 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-22439 be exploited remotely?

Yes. CVE-2023-22439 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-22439?

CVE-2023-22439 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2023-22439

MEDIUM

CVE-2023-22439

CWE-20Published: December 18, 2023· Updated: Jun 17, 2026

4.3

CVSS v3.1

Official Description

Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform a Denial of Service of the diagnostic web interface.

This issue affects: Gallagher Controller 6000 and 7000 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), 8.60 prior to vCR8.60.231116a (distributed in 8.60.2550 (MR7)), all versions of 8.50 and prior.

NVD Source

Technical Analysis

CVE-2023-22439 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.