Read the docs

Secomea

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Secomea records in CISA KEV

No Secomea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gatemanager 8250 Firmware 20 records MEDIUM Gatemanager 4250 Firmware 14 records MEDIUM Gatemanager 4260 Firmware 14 records MEDIUM Gatemanager 9250 Firmware 14 records MEDIUM Gatemanager 8 records MEDIUM Sitemanager 1129 Firmware 7 records MEDIUM Sitemanager 1139 Firmware 7 records MEDIUM Sitemanager 1149 Firmware 7 records MEDIUM

Records

8 records in Gatemanager · all components

TI-2022-17830 CVE-2022-38123 · GHSA-q365-6hx4-82gp

Insufficient validation of plugin files

Priority MEDIUM 41

Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00796 Published 2022-12-06 Fixed in 10.0 CWE-20
TI-2022-03946 CVE-2022-4308 · GHSA-xr26-qphw-jcg8

Clear-text passwords in configuration files

Priority LOW 39

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-04-19 Fixed in 10.1 CWE-256
TI-2022-02550 CVE-2022-2752 · GHSA-6cwc-7j5r-rwvf

Potential vulnerabilities in GM login process

Priority LOW 33

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00183 Published 2022-12-09 Fixed in 10.0 CWE-287
TI-2021-11989 CVE-2021-32009 · GHSA-wm49-p28j-wfgv

Missing XSS guards on firmware page

Priority LOW 28

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2022-03-11 No fix listed CWE-79
TI-2022-09358 CVE-2022-25786 · GHSA-q4gh-2cv2-8pcv

GateManager debug interface is included in production builds

Priority LOW 24

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00737 Published 2022-05-04 Fixed in 9.7 CWE-420
TI-2021-11986 CVE-2021-32006 · GHSA-xf56-6gfr-p968

GateManager information leak for LinkManager Users

Priority LOW 24

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0064 Published 2022-03-07 No fix listed CWE-274
TI-2023-00302 CVE-2023-0317 · GHSA-xf23-wgv8-93v6

GateManager debug interface is included in non-debug builds

Priority LOW 23

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00521 Published 2023-04-19 Fixed in 10.1 CWE-420
Open these records in search →