CVE-2020-29021: Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)
Published Feb 8, 2021
·Updated
A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.
Affected Software
8 affected components
Secomea Gatemanager 8250 Firmware<9.3
Secomea Gatemanager 8250
Secomea Gatemanager 4250 Firmware
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware
Secomea Gatemanager 4260
Secomea Gatemanager 9250 Firmware
Secomea Gatemanager 9250
Event History
Feb 8, 2021
CVE Published
via MITRE·10:08 PM
Data Sourced
via MITRE·10:08 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-29021.
2
What is the severity of CVE-2020-29021?
The severity of CVE-2020-29021 is medium, with a severity value of 4.8.
3
Which versions of GateManager are affected by CVE-2020-29021?
GateManager all versions prior to 9.3 are affected by CVE-2020-29021.
4
How does CVE-2020-29021 affect Secomea Gatemanager 8250?
Secomea Gatemanager 8250 is not vulnerable to CVE-2020-29021.
5
Where can I find more information about CVE-2020-29021?
You can find more information about CVE-2020-29021 at the following link: https://www.secomea.com/support/cybersecurity-advisory/