CVE-2022-25783: Hacking attempts from logged-in users are not properly logged by GM
Published May 4, 2022
·Updated
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Affected Software
8 affected components
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
Secomea Gatemanager 9250 Firmware<9.7.622134021
Secomea Gatemanager 9250
Event History
May 4, 2022
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-25783?
CVE-2022-25783 is an Insufficient Logging vulnerability in the web server of Secomea GateManager.
2
What is the severity of CVE-2022-25783?
The severity of CVE-2022-25783 is medium with a CVSS score of 4.3.
3
Which versions of Secomea GateManager are affected by CVE-2022-25783?
Secomea GateManager versions prior to 9.7 are affected by CVE-2022-25783.
4
How does CVE-2022-25783 impact users?
CVE-2022-25783 allows a logged in user to issue improper queries without logging, compromising the security of the system.
5
How can I fix CVE-2022-25783?
To fix CVE-2022-25783, it is recommended to update Secomea GateManager to version 9.7 or above.