CVE-2021-32003: Configuration service port remains open 10 minutes after reboot even when already provisioned
Published Aug 5, 2021
·Updated
Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.
Affected Software
2 affected components
Secomea Sitemanager Firmware<9.5.621256022
Secomea SiteManager
Event History
Aug 5, 2021
CVE Published
via MITRE·08:33 PM
Data Sourced
via MITRE·08:33 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-32003.
2
What is the title of this vulnerability?
The title of this vulnerability is Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local …
3
What is the severity of CVE-2021-32003?
The severity of CVE-2021-32003 is high.
4
How does CVE-2021-32003 affect Secomea SiteManager?
CVE-2021-32003 affects Secomea SiteManager versions prior to 9.5 on Hardware.
5
How can I fix CVE-2021-32003?
To fix CVE-2021-32003, update to Secomea SiteManager version 9.5 or later.