Read the docs
TI-2020-11363 Aliases CVE-2020-14512GHSA-xv88-jwg8-mvgf

USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916

Priority LOW 37CWE-916Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords.

Why it matters now

EPSS 0.00823 57th percentileScored 2026-11-07
Fix Fixed GateManager (Secomea): 9.2c

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SecomeaGateManagerAll versions prior to 9.2c to before 9.2c9.2cPatch availableCNA
  • GateManager VendorSecomea Affected All versions prior to 9.2c to before 9.2c Fixed in 9.2c Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*before 9.2cVulnerableSecomea
cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*not specified by NVDRunning onSecomea
  • cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:* Versions before 9.2c Vulnerable ·Secomea
  • cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Secomea

Remediation

  • Fix · CNA GateManager (Secomea) Fixed in 9.2c

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Secomea GateManager 9.2c

    3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW

    Other records, highest priority first

    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-14512
  2. 2026-10-03 Alias added: GHSA-xv88-jwg8-mvgf

References

Advisory 1

  • TI-2020-11361 OFF-BY-ONE ERROR CWE-193 CVSS 3.1CRITICAL 9.8
  • TI-2020-11359 OFF-BY-ONE ERROR CWE-193 CVSS 3.1CRITICAL 9.8
  • TI-2020-11351 IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158 CVSS 3.1CRITICAL 10.0
  • TI-2020-17532 Path traversal in Secomea GateManager CVSS 3.1CRITICAL 9.0
  • TI-2022-09350 Unload handlers may unintentionally defeat CSRF guards CVSS 3.1HIGH 8.8
  • TI-2020-17538 Add integrity check of GateManager firmware CVSS 3.1HIGH 8.4
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences