Latest secomea gatemanager 8250 firmware Vulnerabilities

● CVE-2022-25778
Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2022-25787
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all ...
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2022-25782
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager v...
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2022-25781
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2022-25780
Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2022-25783
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
and 2 more
● CVE-2021-32010
Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All version...
Secomea Sitemanager 1129 Firmware<9.7.622134021
Secomea Sitemanager 1129
Secomea Sitemanager 1139 Firmware<9.7.622134021
Secomea Sitemanager 1139
Secomea Sitemanager 1149 Firmware<9.7.622134021
Secomea Sitemanager 1149
and 21 more
● CVE-2021-32004
This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.
Secomea Gatemanager 8250 Firmware<9.6
Secomea Gatemanager 8250
● CVE-2020-29032
Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManag...
Secomea Gatemanager 8250 Firmware<9.4.621054022
Secomea Gatemanager 8250
● CVE-2020-29022
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior ...
Secomea Gatemanager 4250 Firmware
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware
Secomea Gatemanager 4260
Secomea Gatemanager 9250 Firmware
Secomea Gatemanager 9250
and 2 more
● CVE-2020-29024
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects...
Secomea Gatemanager 4250 Firmware
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware
Secomea Gatemanager 4260
Secomea Gatemanager 9250 Firmware
Secomea Gatemanager 9250
and 2 more
● CVE-2020-29023
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's comp...
Secomea Gatemanager 4250 Firmware
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware
Secomea Gatemanager 4260
Secomea Gatemanager 9250 Firmware
Secomea Gatemanager 9250
and 2 more
● CVE-2020-29031
An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via ...
Secomea Gatemanager 8250 Firmware<9.2c
Secomea Gatemanager 8250
Secomea Gatemanager 4250 Firmware<9.0i
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.0i
Secomea Gatemanager 4260
and 2 more
● CVE-2020-29026
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the...
Secomea Gatemanager 8250 Firmware<9.2c
Secomea Gatemanager 8250
Secomea Gatemanager 4250 Firmware<9.0i
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.0i
Secomea Gatemanager 4260
and 2 more
● CVE-2020-29021
A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.
Secomea Gatemanager 8250 Firmware<9.3
Secomea Gatemanager 8250
Secomea Gatemanager 4250 Firmware
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware
Secomea Gatemanager 4260
and 2 more
● CVE-2020-14508
GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition.
Secomea Gatemanager 8250 Firmware=9.2c
Secomea Gatemanager 8250
● CVE-2020-14512
GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords.
Secomea Gatemanager 8250 Firmware<9.2c
Secomea Gatemanager 8250
● CVE-2020-14500
Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data.
Secomea Gatemanager 8250 Firmware=9.2c
Secomea Gatemanager 8250

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203