CVE-2022-25785: Buffer overrun
Published May 4, 2022
·Updated
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.
Affected Software
18 affected components
Secomea Sitemanager 1129 Firmware<9.7.622134021
Secomea Sitemanager 1129
Secomea Sitemanager 1139 Firmware<9.7.622134021
Secomea Sitemanager 1139
Secomea Sitemanager 1149 Firmware<9.7.622134021
Secomea Sitemanager 1149
Secomea Sitemanager 3329 Firmware<9.7.622134021
Secomea Sitemanager 3329
Secomea Sitemanager 3339 Firmware<9.7.622134021
Secomea Sitemanager 3339
Secomea Sitemanager 3349 Firmware<9.7.622134021
Secomea Sitemanager 3349
Secomea Sitemanager 3529 Firmware<9.7.622134021
Secomea Sitemanager 3529
Secomea Sitemanager 3539 Firmware<9.7.622134021
Secomea Sitemanager 3539
Secomea Sitemanager 3549 Firmware<9.7.622134021
Secomea Sitemanager 3549
Event History
May 4, 2022
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-25785?
CVE-2022-25785 is a stack-based buffer overflow vulnerability in SiteManager that allows a logged-in or local user to cause arbitrary code execution.
2
Which versions of SiteManager are affected by CVE-2022-25785?
CVE-2022-25785 affects all versions of Secomea SiteManager prior to 9.7.
3
What is the severity of CVE-2022-25785?
CVE-2022-25785 has a severity score of 7.2, indicating a high severity.
4
How can I fix CVE-2022-25785?
To fix CVE-2022-25785, you should upgrade Secomea SiteManager to version 9.7 or later.
5
Where can I find more information about CVE-2022-25785?
You can find more information about CVE-2022-25785 in the cybersecurity advisory on the Secomea website.