Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2023-2912

SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Sitemanager Embedded
CVE-2021-32010

Clients may connect to a GateManager with TLS 1.0

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Gatemanager 4250 Gatemanager 4250 Firmware Gatemanager 4260 and 24 more
CVE-2021-32005

SiteManager Log View XSS Issue

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Sitemanager 1129 Sitemanager 1129 Firmware Sitemanager 1139 and 15 more
CVE-2021-32003

Configuration service port remains open 10 minutes after reboot even when already provisioned

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Sitemanager Sitemanager Firmware
CVE-2021-32002

SiteManager troubleshooter allows access without authentication from local network

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Sitemanager Sitemanager Firmware
CVE-2020-29025

DOM-based Javascript injection

A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This issue affects all versions and variants of SM-E prior to version 9.3

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Secomea
Products
Sitemanager Embedded
CVE-2020-29020

Reject Remote Management via Cellular UPLINK2

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.

CVSS 3.1 · 9.1 Critical EPSS 1.7% KEV · Not listed
Vendors
Secomea
Products
Sitemanager Sitemanager Firmware