Read the docs
TI-2020-17529 Aliases CVE-2020-29023GHSA-fw85-97w2-fp5v

CSV Formula Injection possible due to improper fields escaping in GateManager

Priority LOW 18CWE-116Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.

Why it matters now

EPSS 0.00549 46th percentileScored 2026-11-07
Fix Fixed GateManager (Secomea): 9.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SecomeaGateManagerall to before 9.39.3Patch availableCNA
  • GateManager VendorSecomea Affected all to before 9.3 Fixed in 9.3 Patch available CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSecomea
cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*not specified by NVDRunning onSecomea
cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSecomea
cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*not specified by NVDRunning onSecomea
cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSecomea
cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*not specified by NVDRunning onSecomea
cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*before 9.3VulnerableSecomea
cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*not specified by NVDRunning onSecomea
  • cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Secomea
  • cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Secomea
  • cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Secomea
  • cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Secomea
  • cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Secomea
  • cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Secomea
  • cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:* Versions before 9.3 Vulnerable ·Secomea
  • cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Secomea

Remediation

  • Fix · CNA GateManager (Secomea) Fixed in 9.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Secomea GateManager 9.3

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-17528 Host Header Injection allowing web cache poisoning attacksPriority LOW 26
    • TI-2020-17530 Missing HtppOnly and Secure flagsPriority LOW 25
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-29023
  2. 2026-10-03 Alias added: GHSA-fw85-97w2-fp5v

References

Advisory 2

  • TI-2020-17532 Path traversal in Secomea GateManager CVSS 3.1CRITICAL 9.0
  • TI-2022-09350 Unload handlers may unintentionally defeat CSRF guards CVSS 3.1HIGH 8.8
  • TI-2020-17537 Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation CVSS 3.1HIGH 8.1
  • TI-2021-11990 Clients may connect to a GateManager with TLS 1.0 CVSS 3.1HIGH 8.1
  • TI-2022-09359 GTA URLs issued by LMM WEB API may leak information CVSS 3.1HIGH 7.5
  • TI-2022-09353 Reflected XSS issues in GateManager CVSS 3.1MEDIUM 6.1
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences