Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Secomea Component: Sitemanager 1149 Firmware Clear all filters
TI-2022-17832 CVE-2022-38125 · GHSA-99j2-jmgm-p5x6

FTP Agent forwards traffic on inactive ports to LinkManager

Priority LOW 24

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2023-04-19 No fix listed CWE-923
TI-2022-17831 CVE-2022-38124 · GHSA-78q7-w9gc-qfgh

Unwanted debug tool

Priority LOW 30

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00548 Published 2022-12-13 No fix listed CWE-267
TI-2022-09357 CVE-2022-25785 · GHSA-3hgg-j739-jpxx

Buffer overrun

Priority LOW 34

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01007 Published 2022-05-04 Fixed in 9.7 CWE-121
TI-2022-09356 CVE-2022-25784 · GHSA-3hf3-rvvm-859m

User controllable HTML element attribute (potential XSS)

Priority MEDIUM 40

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00611 Published 2022-05-04 Fixed in 9.7 CWE-79
TI-2021-11990 CVE-2021-32010 · GHSA-7xh5-p97v-cg6q

Clients may connect to a GateManager with TLS 1.0

Priority LOW 35

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00231 Published 2022-05-04 Fixed in 9.7 CWE-326
TI-2021-11985 CVE-2021-32005 · GHSA-3wx2-5m79-ph37

SiteManager Log View XSS Issue

Priority LOW 30

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00592 Published 2022-03-07 No fix listed CWE-79
TI-2020-17533 CVE-2020-29027 · GHSA-24g3-3pph-m744

Reflected cross site scripting in Secomea SiteManager

Priority LOW 25

Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2021-02-16 Fixed in 9.3 CWE-79