Read the docs

Secomea

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Secomea records in CISA KEV

No Secomea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gatemanager 8250 Firmware 20 records MEDIUM Gatemanager 4250 Firmware 14 records MEDIUM Gatemanager 4260 Firmware 14 records MEDIUM Gatemanager 9250 Firmware 14 records MEDIUM Gatemanager 8 records MEDIUM Sitemanager 1129 Firmware 7 records MEDIUM Sitemanager 1139 Firmware 7 records MEDIUM Sitemanager 1149 Firmware 7 records MEDIUM

Records

7 records in Sitemanager 1139 Firmware · all components

TI-2022-09356 CVE-2022-25784 · GHSA-3hf3-rvvm-859m

User controllable HTML element attribute (potential XSS)

Priority MEDIUM 40

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00611 Published 2022-05-04 Fixed in 9.7 CWE-79
TI-2021-11990 CVE-2021-32010 · GHSA-7xh5-p97v-cg6q

Clients may connect to a GateManager with TLS 1.0

Priority LOW 35

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00231 Published 2022-05-04 Fixed in 9.7 CWE-326
TI-2022-09357 CVE-2022-25785 · GHSA-3hgg-j739-jpxx

Buffer overrun

Priority LOW 34

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01007 Published 2022-05-04 Fixed in 9.7 CWE-121
TI-2022-17831 CVE-2022-38124 · GHSA-78q7-w9gc-qfgh

Unwanted debug tool

Priority LOW 30

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00548 Published 2022-12-13 No fix listed CWE-267
TI-2021-11985 CVE-2021-32005 · GHSA-3wx2-5m79-ph37

SiteManager Log View XSS Issue

Priority LOW 30

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00592 Published 2022-03-07 No fix listed CWE-79
TI-2020-17533 CVE-2020-29027 · GHSA-24g3-3pph-m744

Reflected cross site scripting in Secomea SiteManager

Priority LOW 25

Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2021-02-16 Fixed in 9.3 CWE-79
TI-2022-17832 CVE-2022-38125 · GHSA-99j2-jmgm-p5x6

FTP Agent forwards traffic on inactive ports to LinkManager

Priority LOW 24

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2023-04-19 No fix listed CWE-923
Open these records in search →