Advisories · Technology

Secomea SiteManager.

Every CVE that names Secomea SiteManager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38125 CVE record

CVSS 2.9 Low

FTP Agent forwards traffic on inactive ports to LinkManager
- Secomea SiteManager
- CWE-923
Not analysed yet 19 Apr 2023
CVE-2022-38124 CVE record

CVSS 5.7 Medium

Unwanted debug tool
- Secomea SiteManager
- Privilege escalation
Not analysed yet 13 Dec 2022
CVE-2022-25785 CVE record

CVSS 6.6 Medium

Buffer overrun
- Secomea SiteManager
- Memory corruption
Not analysed yet 4 May 2022
CVE-2022-25784 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

User controllable HTML element attribute (potential XSS)
- Secomea SiteManager
- Cross-site scripting (XSS)
Not analysed yet 4 May 2022
CVE-2021-32010 CVE record

CVSS 5.6 Medium

Clients may connect to a GateManager with TLS 1.0
- Secomea SiteManager
- Secomea LinkManager
- Weak cryptography or TLS
Not analysed yet 4 May 2022
CVE-2021-32005 CVE record

CVSS 6.5 Medium

SiteManager Log View XSS Issue
- Secomea SiteManager
- Cross-site scripting (XSS)
Not analysed yet 7 Mar 2022
CVE-2021-32003 CVE record

CVSS 8.0 High

Configuration service port remains open 10 minutes after reboot even when already provisioned
- Secomea SiteManager
- CWE-523
Not analysed yet 5 Aug 2021
CVE-2021-32002 CVE record

CVSS 4.3 Medium

SiteManager troubleshooter allows access without authentication from local network
- Secomea SiteManager
- Information disclosure
- Broken access control
Not analysed yet 5 Aug 2021
CVE-2020-29020 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Reject Remote Management via Cellular UPLINK2
- Secomea SiteManager
- Broken access control
Not analysed yet 5 Mar 2021
CVE-2020-29027 CVE record

CVSS 5.4 Medium

Reflected Cross Site Scripting
- Secomea SiteManager
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2021