Vulnerabilities

TI-2021-11983 CVE-2021-32003 · GHSA-c7vw-6v5h-6fj3

Configuration service port remains open 10 minutes after reboot even when already provisioned

LOW 34

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00228 Published 2021-08-05 Fixed in 9.5 CWE-523

TI-2021-11982 CVE-2021-32002 · GHSA-g48h-ph99-79xp

SiteManager troubleshooter allows access without authentication from local network

LOW 20

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.0023 Published 2021-08-05 Fixed in 9.5 CWE-200

Vulnerabilities

Filters

Configuration service port remains open 10 minutes after reboot even when already provisioned

SiteManager troubleshooter allows access without authentication from local network