Secomea kayıtları
secomea üreticisine ait 44 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %2,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-20 Improper Input Validation3
- CWE-420 Unprotected Alternate Channel2
- CWE-274 Improper Handling of Insufficient Privileges2
- CWE-193 Off-by-one Error2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
44 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-14510İstismar yok | OFF-BY-ONE ERROR CWE-193secomea · gatemanager 8250 firmware · CWE-193 | Kritik9,8 | — | %2,5 | 25 Ağu 2020 |
40Planlayın | CVE-2020-14508İstismar yok | OFF-BY-ONE ERROR CWE-193secomea · gatemanager 8250 firmware · CWE-193 | Kritik9,8 | — | %2,0 | 25 Ağu 2020 |
39İzleyin | CVE-2020-14500İstismar yok | IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158secomea · gatemanager 8250 firmware · CWE-158 | Kritik9,8 | — | %1,7 | 25 Ağu 2020 |
35İzleyin | CVE-2020-29030İstismar yok | Insufficient CSRF guardssecomea · gatemanager firmware · CWE-352 | Yüksek8,8 | — | %0,5 | 5 Mar 2021 |
35İzleyin | CVE-2022-25778İstismar yok | Unload handlers may unintentionally defeat CSRF guardssecomea · gatemanager 4250 firmware · CWE-352 | Yüksek8,8 | — | %0,3 | 4 May 2022 |
35İzleyin | CVE-2022-4308İstismar yok | Clear-text passwords in configuration filessecomea · gatemanager · CWE-256 | Yüksek8,8 | — | %0,2 | 19 Nis 2023 |
34İzleyin | CVE-2021-32008İstismar yok | Logged-in Administrator may get unrestricted file system accesssecomea · gatemanager · CWE-22 | Yüksek8,7 | — | %1,0 | 4 Mar 2022 |
32İzleyin | CVE-2020-29031İstismar yok | Insecure Direct Object Reference in GateManager WebUI can cause privilege escalationsecomea · gatemanager 8250 firmware · CWE-280 | Yüksek8,1 | — | %0,7 | 15 Şub 2021 |
32İzleyin | CVE-2024-1579İstismar yok | Insufficient seeding of random number generatorsecomea · gatemanager · CWE-335 | Yüksek8,1 | — | %0,5 | 29 Nis 2024 |
32İzleyin | CVE-2024-1969İstismar yok | Heap buffer overflowsecomea · gatemanager · CWE-120 | Yüksek8,2 | — | %0,5 | 29 Nis 2024 |
32İzleyin | CVE-2021-32010İstismar yok | Clients may connect to a GateManager with TLS 1.0secomea · sitemanager 1129 firmware · CWE-326 | Yüksek8,1 | — | %0,2 | 4 May 2022 |
31İzleyin | CVE-2022-2752İstismar yok | Potential vulnerabilities in GM login processsecomea · gatemanager · CWE-287 | Yüksek7,8 | — | %0,2 | 9 Ara 2022 |
30İzleyin | CVE-2020-14512İstismar yok | USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916secomea · gatemanager 8250 firmware · CWE-916 | Yüksek7,5 | — | %0,8 | 25 Ağu 2020 |
30İzleyin | CVE-2023-2912İstismar yok | SiteManager Embedded service disruptionsecomea · sitemanager embedded · CWE-416 | Yüksek7,5 | — | %0,5 | 17 Tem 2023 |
29İzleyin | CVE-2020-29020İstismar yok | Reject Remote Management via Cellular UPLINK2secomea · sitemanager firmware · CWE-284 | Yüksek7,2 | — | %1,7 | 5 Mar 2021 |
28İzleyin | CVE-2022-25785İstismar yok | Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.secomea · sitemanager 1129 firmware · CWE-121 | Yüksek7,2 | — | %1,0 | 4 May 2022 |
28İzleyin | CVE-2022-38123İstismar yok | Insufficient validation of plugin filessecomea · gatemanager · CWE-20 | Yüksek7,2 | — | %0,8 | 6 Ara 2022 |
28İzleyin | CVE-2020-29032İstismar yok | Add integrity check of GateManager firmwaresecomea · gatemanager 8250 firmware · CWE-494 | Yüksek7,2 | — | %0,5 | 5 Mar 2021 |
26İzleyin | CVE-2020-29026İstismar yok | A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminissecomea · gatemanager 8250 firmware · CWE-22 | Orta6,5 | — | %1,5 | 15 Şub 2021 |
26İzleyin | CVE-2022-38124İstismar yok | Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.secomea · sitemanager 1129 firmware · CWE-267 | Orta6,5 | — | %0,5 | 13 Ara 2022 |
26İzleyin | CVE-2022-25787İstismar yok | GTA URLs issued by LMM WEB API may leak informationsecomea · gatemanager 4250 firmware · CWE-598 | Orta6,7 | — | %0,2 | 4 May 2022 |
24İzleyin | CVE-2020-29029İstismar yok | XSS issue due to insufficient sanitization of input fieldsecomea · gatemanager firmware · CWE-20 | Orta6,1 | — | %0,8 | 5 Mar 2021 |
24İzleyin | CVE-2020-29028İstismar yok | Reflected XSS issuessecomea · gatemanager firmware · CWE-79 | Orta6,1 | — | %0,7 | 5 Mar 2021 |
24İzleyin | CVE-2020-29025İstismar yok | DOM-based Javascript injectionsecomea · sitemanager embedded · CWE-79 | Orta6,1 | — | %0,6 | 16 Şub 2021 |
24İzleyin | CVE-2021-32009İstismar yok | Missing XSS guards on firmware pagesecomea · gatemanager · CWE-79 | Orta6,1 | — | %0,5 | 11 Mar 2022 |
- CVE-2020-1451040Planlayın
OFF-BY-ONE ERROR CWE-193
KritikCVSS 9,8İstismar yokEPSS %2secomea · gatemanager 8250 firmware25 Ağu 2020
- CVE-2020-1450840Planlayın
OFF-BY-ONE ERROR CWE-193
KritikCVSS 9,8İstismar yokEPSS %2secomea · gatemanager 8250 firmware25 Ağu 2020
- CVE-2020-1450039İzleyin
IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158
KritikCVSS 9,8İstismar yokEPSS %2secomea · gatemanager 8250 firmware25 Ağu 2020
- CVE-2020-2903035İzleyin
Insufficient CSRF guards
YüksekCVSS 8,8İstismar yokEPSS %1secomea · gatemanager firmware5 Mar 2021
- CVE-2022-2577835İzleyin
Unload handlers may unintentionally defeat CSRF guards
YüksekCVSS 8,8İstismar yokEPSS %0secomea · gatemanager 4250 firmware4 May 2022
- CVE-2022-430835İzleyin
Clear-text passwords in configuration files
YüksekCVSS 8,8İstismar yokEPSS %0secomea · gatemanager19 Nis 2023
- CVE-2021-3200834İzleyin
Logged-in Administrator may get unrestricted file system access
YüksekCVSS 8,7İstismar yokEPSS %1secomea · gatemanager4 Mar 2022
- CVE-2020-2903132İzleyin
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
YüksekCVSS 8,1İstismar yokEPSS %1secomea · gatemanager 8250 firmware15 Şub 2021
- CVE-2024-157932İzleyin
Insufficient seeding of random number generator
YüksekCVSS 8,1İstismar yokEPSS %1secomea · gatemanager29 Nis 2024
- CVE-2024-196932İzleyin
Heap buffer overflow
YüksekCVSS 8,2İstismar yokEPSS %0secomea · gatemanager29 Nis 2024
- CVE-2021-3201032İzleyin
Clients may connect to a GateManager with TLS 1.0
YüksekCVSS 8,1İstismar yokEPSS %0secomea · sitemanager 1129 firmware4 May 2022
- CVE-2022-275231İzleyin
Potential vulnerabilities in GM login process
YüksekCVSS 7,8İstismar yokEPSS %0secomea · gatemanager9 Ara 2022
- CVE-2020-1451230İzleyin
USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916
YüksekCVSS 7,5İstismar yokEPSS %1secomea · gatemanager 8250 firmware25 Ağu 2020
- CVE-2023-291230İzleyin
SiteManager Embedded service disruption
YüksekCVSS 7,5İstismar yokEPSS %1secomea · sitemanager embedded17 Tem 2023
- CVE-2020-2902029İzleyin
Reject Remote Management via Cellular UPLINK2
YüksekCVSS 7,2İstismar yokEPSS %2secomea · sitemanager firmware5 Mar 2021
- CVE-2022-2578528İzleyin
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.
YüksekCVSS 7,2İstismar yokEPSS %1secomea · sitemanager 1129 firmware4 May 2022
- CVE-2022-3812328İzleyin
Insufficient validation of plugin files
YüksekCVSS 7,2İstismar yokEPSS %1secomea · gatemanager6 Ara 2022
- CVE-2020-2903228İzleyin
Add integrity check of GateManager firmware
YüksekCVSS 7,2İstismar yokEPSS %0secomea · gatemanager 8250 firmware5 Mar 2021
- CVE-2020-2902626İzleyin
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminis
OrtaCVSS 6,5İstismar yokEPSS %1secomea · gatemanager 8250 firmware15 Şub 2021
- CVE-2022-3812426İzleyin
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
OrtaCVSS 6,5İstismar yokEPSS %1secomea · sitemanager 1129 firmware13 Ara 2022
- CVE-2022-2578726İzleyin
GTA URLs issued by LMM WEB API may leak information
OrtaCVSS 6,7İstismar yokEPSS %0secomea · gatemanager 4250 firmware4 May 2022
- CVE-2020-2902924İzleyin
XSS issue due to insufficient sanitization of input field
OrtaCVSS 6,1İstismar yokEPSS %1secomea · gatemanager firmware5 Mar 2021
- CVE-2020-2902824İzleyin
Reflected XSS issues
OrtaCVSS 6,1İstismar yokEPSS %1secomea · gatemanager firmware5 Mar 2021
- CVE-2020-2902524İzleyin
DOM-based Javascript injection
OrtaCVSS 6,1İstismar yokEPSS %1secomea · sitemanager embedded16 Şub 2021
- CVE-2021-3200924İzleyin
Missing XSS guards on firmware page
OrtaCVSS 6,1İstismar yokEPSS %0secomea · gatemanager11 Mar 2022