CVE-2022-38125: FTP Agent forwards traffic on inactive ports to LinkManager
Published Apr 19, 2023
·Updated
Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.
Affected Software
48 affected components
Secomea Sitemanager 3549 Firmware<10.0.622465022
Secomea Sitemanager 3549
Secomea Sitemanager 3539 Firmware<10.0.622465022
Secomea Sitemanager 3539
Secomea Sitemanager 3529 Firmware<10.0.622465022
Secomea Sitemanager 3529
Secomea Sitemanager 3349 Firmware<10.0.622465022
Secomea Sitemanager 3349
Secomea Sitemanager 3339 Firmware<10.0.622465022
Secomea Sitemanager 3339
Secomea Sitemanager 3329 Firmware<10.0.622465022
Secomea Sitemanager 3329
Secomea Sitemanager 1549 Firmware<10.0.622465022
Secomea Sitemanager 1549
Secomea Sitemanager 1539 Firmware<10.0.622465022
Secomea Sitemanager 1539
Secomea Sitemanager 1529 Firmware<10.0.622465022
Secomea Sitemanager 1529
Secomea Sitemanager 1149 Firmware<10.0.622465022
Secomea Sitemanager 1149
Secomea Sitemanager 1139 Firmware<10.0.622465022
Secomea Sitemanager 1139
Secomea Sitemanager 1129 Firmware<10.0.622465022
Secomea Sitemanager 1129
All of the following
Secomea Sitemanager 3549 Firmware<10.0.622465022
Secomea Sitemanager 3549
All of the following
Secomea Sitemanager 3539 Firmware<10.0.622465022
Secomea Sitemanager 3539
All of the following
Secomea Sitemanager 3529 Firmware<10.0.622465022
Secomea Sitemanager 3529
All of the following
Secomea Sitemanager 3349 Firmware<10.0.622465022
Secomea Sitemanager 3349
All of the following
Secomea Sitemanager 3339 Firmware<10.0.622465022
Secomea Sitemanager 3339
All of the following
Secomea Sitemanager 3329 Firmware<10.0.622465022
Secomea Sitemanager 3329
All of the following
Secomea Sitemanager 1549 Firmware<10.0.622465022
Secomea Sitemanager 1549
All of the following
Secomea Sitemanager 1539 Firmware<10.0.622465022
Secomea Sitemanager 1539
All of the following
Secomea Sitemanager 1529 Firmware<10.0.622465022
Secomea Sitemanager 1529
All of the following
Secomea Sitemanager 1149 Firmware<10.0.622465022
Secomea Sitemanager 1149
All of the following
Secomea Sitemanager 1139 Firmware<10.0.622465022
Secomea Sitemanager 1139
All of the following
Secomea Sitemanager 1129 Firmware<10.0.622465022
Secomea Sitemanager 1129
Event History
Apr 19, 2023
CVE Published
via MITRE·11:58 AM
Data Sourced
via MITRE·11:58 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-38125?
CVE-2022-38125 is an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager.
2
What is the severity of CVE-2022-38125?
CVE-2022-38125 has a severity value of 5.5, which is medium.
3
What software is affected by CVE-2022-38125?
Secomea SiteManager firmware versions up to and exclusive of 10.0.622465022 are affected.
4
How can CVE-2022-38125 be exploited?
The vulnerability allows exploiting trust in the client by improperly restricting the communication channel to intended endpoints in Secomea SiteManager FTP Agent modules.
5
How can I fix CVE-2022-38125?
To fix CVE-2022-38125, update Secomea SiteManager firmware to version 10.0.622465022 or later.