Secomea Gatemanager_4250_firmware
14 CVEs affecting Secomea Gatemanager_4250_firmware. Latest disclosed: 2022-05-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-29026 | Critical | 9.0 | 2021-02-15 | A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions… |
CVE-2022-25787 | High | 7.5 | 2022-05-04 | Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. Thi… |
CVE-2020-29031 | High | 7.1 | 2021-02-15 | An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any u… |
CVE-2021-32010 | Medium | 5.6 | 2022-05-04 | Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue… |
CVE-2022-25782 | Medium | 5.4 | 2022-05-04 | Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information… |
CVE-2020-29024 | Medium | 5.3 | 2021-02-16 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access… |
CVE-2020-29022 | Medium | 5.3 | 2021-02-16 | Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affect… |
CVE-2022-25783 | Medium | 4.3 | 2022-05-04 | Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Se… |
CVE-2022-25780 | Medium | 4.3 | 2022-05-04 | Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope. |
CVE-2022-25779 | Medium | 4.3 | 2022-05-04 | Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secom… |
CVE-2022-25781 | Medium | 4.2 | 2022-05-04 | Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session. |
CVE-2022-25778 | Medium | 4.2 | 2022-05-04 | Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session. |
CVE-2020-29023 | Low | 3.5 | 2021-02-16 | Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may… |
CVE-2020-29021 | Low | 3.5 | 2021-02-08 | A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager a… |