CVE-2022-38124: Unwanted debug tool
Published Dec 13, 2022
·Updated
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
Affected Software
24 affected components
Secomea Sitemanager 1129 Firmware<10.0.622425017
Secomea Sitemanager 1129
Secomea Sitemanager 3329 Firmware<10.0.622425017
Secomea Sitemanager 3329
Secomea Sitemanager 1529 Firmware<10.0.622425017
Secomea Sitemanager 1529
Secomea Sitemanager 3529 Firmware<10.0.622425017
Secomea Sitemanager 3529
Secomea Sitemanager 1139 Firmware<10.0.622425017
Secomea Sitemanager 1139
Secomea Sitemanager 3339 Firmware<10.0.622425017
Secomea Sitemanager 3339
Secomea Sitemanager 1539 Firmware<10.0.622425017
Secomea Sitemanager 1539
Secomea Sitemanager 3539 Firmware<10.0.622425017
Secomea Sitemanager 3539
Secomea Sitemanager 1149 Firmware<10.0.622425017
Secomea Sitemanager 1149
Secomea Sitemanager 3349 Firmware<10.0.622425017
Secomea Sitemanager 3349
Secomea Sitemanager 1549 Firmware<10.0.622425017
Secomea Sitemanager 1549
Secomea Sitemanager 3549 Firmware<10.0.622425017
Secomea Sitemanager 3549
Event History
Dec 13, 2022
CVE Published
via MITRE·01:06 PM
Data Sourced
via MITRE·01:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-38124?
CVE-2022-38124 is a vulnerability in Secomea SiteManager that allows a logged-in administrator to modify the system state in an unintended manner.
2
What is the severity of CVE-2022-38124?
CVE-2022-38124 has a severity rating of 6.5 (medium).
3
How does CVE-2022-38124 affect Secomea SiteManager?
CVE-2022-38124 affects Secomea SiteManager by allowing a logged-in administrator to modify the system state unintentionally.
4
Is Secomea SiteManager 1129 vulnerable to CVE-2022-38124?
No, Secomea SiteManager 1129 is not vulnerable to CVE-2022-38124.
5
How can I fix CVE-2022-38124?
To fix CVE-2022-38124, it is recommended to update Secomea SiteManager firmware to version 10.0.622425017 or later.