Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LSecomea Gatemanager 4250
HWSecomeaall versionsSecomea Gatemanager 4250 Firmware
OSSecomea< 9.7.622134021Secomea Gatemanager 4260
HWSecomeaall versionsSecomea Gatemanager 4260 Firmware
OSSecomea< 9.7.622134021Secomea Gatemanager 8250
HWSecomeaall versionsSecomea Gatemanager 8250 Firmware
OSSecomea< 9.7.622134021Secomea Gatemanager 9250
HWSecomeaall versionsSecomea Gatemanager 9250 Firmware
OSSecomea< 9.7.622134021Secomea Linkmanager
APPSecomea< 9.7.622134021Secomea Sitemanager 1129
HWSecomeaall versionsSecomea Sitemanager 1129 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 1139
HWSecomeaall versionsSecomea Sitemanager 1139 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 1149
HWSecomeaall versionsSecomea Sitemanager 1149 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3329
HWSecomeaall versionsSecomea Sitemanager 3329 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3339
HWSecomeaall versionsSecomea Sitemanager 3339 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3349
HWSecomeaall versionsSecomea Sitemanager 3349 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3529
HWSecomeaall versionsSecomea Sitemanager 3529 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3539
HWSecomeaall versionsSecomea Sitemanager 3539 Firmware
OSSecomea< 9.7.622134021Secomea Sitemanager 3549
HWSecomeaall versionsSecomea Sitemanager 3549 Firmware
OSSecomea< 9.7.622134021
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2022-25784CRITICAL9.1PL ✓same product
XSS w interfejsie Web GUI Secomea SiteManager — wstrzyknięcie skryptu
CVE-2020-29026CRITICAL9.0PL ✓same product
Path Traversal w Secomea GateManager — odczyt i zapis dowolnych plików
CVE-2020-14510CRITICAL9.8PL ✓same product
Secomea GateManager — zakodowane dane logowania do telnet umożliwiające RCE jako root
CVE-2020-14500CRITICAL10.0PL ✓same product
Przepełnienie bufora w Secomea GateManager — nadpisanie dowolnych danych
CVE-2022-25787HIGH7.5same product
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allo...