Secomea records

44 published records for vendor secomea.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 2.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

44 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-14510No exploit	OFF-BY-ONE ERROR CWE-193secomea · gatemanager 8250 firmware · CWE-193 Pre-auth Hard-coded credentials	Critical9.8	—	2.5%	Aug 25, 2020
40Plan	CVE-2020-14508No exploit	OFF-BY-ONE ERROR CWE-193secomea · gatemanager 8250 firmware · CWE-193 pre-auth RCE	Critical9.8	—	2.0%	Aug 25, 2020
39Monitor	CVE-2020-14500No exploit	IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158secomea · gatemanager 8250 firmware · CWE-158 Pre-auth	Critical9.8	—	1.7%	Aug 25, 2020
35Monitor	CVE-2020-29030No exploit	Insufficient CSRF guardssecomea · gatemanager firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Mar 5, 2021
35Monitor	CVE-2022-25778No exploit	Unload handlers may unintentionally defeat CSRF guardssecomea · gatemanager 4250 firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 4, 2022
35Monitor	CVE-2022-4308No exploit	Clear-text passwords in configuration filessecomea · gatemanager · CWE-256	High8.8	—	0.2%	Apr 19, 2023
34Monitor	CVE-2021-32008No exploit	Logged-in Administrator may get unrestricted file system accesssecomea · gatemanager · CWE-22 Path traversal	High8.7	—	1.0%	Mar 4, 2022
32Monitor	CVE-2020-29031No exploit	Insecure Direct Object Reference in GateManager WebUI can cause privilege escalationsecomea · gatemanager 8250 firmware · CWE-280 Broken access control (IDOR)	High8.1	—	0.7%	Feb 15, 2021
32Monitor	CVE-2024-1579No exploit	Insufficient seeding of random number generatorsecomea · gatemanager · CWE-335 Pre-auth	High8.1	—	0.5%	Apr 29, 2024
32Monitor	CVE-2024-1969No exploit	Heap buffer overflowsecomea · gatemanager · CWE-120 Pre-auth Memory safety	High8.2	—	0.5%	Apr 29, 2024
32Monitor	CVE-2021-32010No exploit	Clients may connect to a GateManager with TLS 1.0secomea · sitemanager 1129 firmware · CWE-326 Pre-auth Weak crypto	High8.1	—	0.2%	May 4, 2022
31Monitor	CVE-2022-2752No exploit	Potential vulnerabilities in GM login processsecomea · gatemanager · CWE-287 Auth bypass	High7.8	—	0.2%	Dec 9, 2022
30Monitor	CVE-2020-14512No exploit	USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916secomea · gatemanager 8250 firmware · CWE-916 Pre-auth	High7.5	—	0.8%	Aug 25, 2020
30Monitor	CVE-2023-2912No exploit	SiteManager Embedded service disruptionsecomea · sitemanager embedded · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Jul 17, 2023
29Monitor	CVE-2020-29020No exploit	Reject Remote Management via Cellular UPLINK2secomea · sitemanager firmware · CWE-284 Broken access control (IDOR)	High7.2	—	1.7%	Mar 5, 2021
28Monitor	CVE-2022-25785No exploit	Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.secomea · sitemanager 1129 firmware · CWE-121 RCE Memory safety	High7.2	—	1.0%	May 4, 2022
28Monitor	CVE-2022-38123No exploit	Insufficient validation of plugin filessecomea · gatemanager · CWE-20	High7.2	—	0.8%	Dec 6, 2022
28Monitor	CVE-2020-29032No exploit	Add integrity check of GateManager firmwaresecomea · gatemanager 8250 firmware · CWE-494	High7.2	—	0.5%	Mar 5, 2021
26Monitor	CVE-2020-29026No exploit	A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminissecomea · gatemanager 8250 firmware · CWE-22 Path traversal	Medium6.5	—	1.5%	Feb 15, 2021
26Monitor	CVE-2022-38124No exploit	Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.secomea · sitemanager 1129 firmware · CWE-267	Medium6.5	—	0.5%	Dec 13, 2022
26Monitor	CVE-2022-25787No exploit	GTA URLs issued by LMM WEB API may leak informationsecomea · gatemanager 4250 firmware · CWE-598	Medium6.7	—	0.2%	May 4, 2022
24Monitor	CVE-2020-29029No exploit	XSS issue due to insufficient sanitization of input fieldsecomea · gatemanager firmware · CWE-20 pre-auth RCE XSS	Medium6.1	—	0.8%	Mar 5, 2021
24Monitor	CVE-2020-29028No exploit	Reflected XSS issuessecomea · gatemanager firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Mar 5, 2021
24Monitor	CVE-2020-29025No exploit	DOM-based Javascript injectionsecomea · sitemanager embedded · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Feb 16, 2021
24Monitor	CVE-2021-32009No exploit	Missing XSS guards on firmware pagesecomea · gatemanager · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Mar 11, 2022

CVE-2020-14510
40Plan
OFF-BY-ONE ERROR CWE-193
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
secomea · gatemanager 8250 firmwareAug 25, 2020
CVE-2020-14508
40Plan
OFF-BY-ONE ERROR CWE-193
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
secomea · gatemanager 8250 firmwareAug 25, 2020
CVE-2020-14500
39Monitor
IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
secomea · gatemanager 8250 firmwareAug 25, 2020
CVE-2020-29030
35Monitor
Insufficient CSRF guards
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
secomea · gatemanager firmwareMar 5, 2021
CVE-2022-25778
35Monitor
Unload handlers may unintentionally defeat CSRF guards
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
secomea · gatemanager 4250 firmwareMay 4, 2022
CVE-2022-4308
35Monitor
Clear-text passwords in configuration files
HighCVSS 8.8No exploitEPSS 0%
secomea · gatemanagerApr 19, 2023
CVE-2021-32008
34Monitor
Logged-in Administrator may get unrestricted file system access
HighCVSS 8.7No exploitEPSS 1%
- Path traversal
secomea · gatemanagerMar 4, 2022
CVE-2020-29031
32Monitor
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
HighCVSS 8.1No exploitEPSS 1%
- Broken access control (IDOR)
secomea · gatemanager 8250 firmwareFeb 15, 2021
CVE-2024-1579
32Monitor
Insufficient seeding of random number generator
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
secomea · gatemanagerApr 29, 2024
CVE-2024-1969
32Monitor
Heap buffer overflow
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
secomea · gatemanagerApr 29, 2024
CVE-2021-32010
32Monitor
Clients may connect to a GateManager with TLS 1.0
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
secomea · sitemanager 1129 firmwareMay 4, 2022
CVE-2022-2752
31Monitor
Potential vulnerabilities in GM login process
HighCVSS 7.8No exploitEPSS 0%
- Auth bypass
secomea · gatemanagerDec 9, 2022
CVE-2020-14512
30Monitor
USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
secomea · gatemanager 8250 firmwareAug 25, 2020
CVE-2023-2912
30Monitor
SiteManager Embedded service disruption
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
secomea · sitemanager embeddedJul 17, 2023
CVE-2020-29020
29Monitor
Reject Remote Management via Cellular UPLINK2
HighCVSS 7.2No exploitEPSS 2%
- Broken access control (IDOR)
secomea · sitemanager firmwareMar 5, 2021
CVE-2022-25785
28Monitor
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution.
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Memory safety
secomea · sitemanager 1129 firmwareMay 4, 2022
CVE-2022-38123
28Monitor
Insufficient validation of plugin files
HighCVSS 7.2No exploitEPSS 1%
secomea · gatemanagerDec 6, 2022
CVE-2020-29032
28Monitor
Add integrity check of GateManager firmware
HighCVSS 7.2No exploitEPSS 0%
secomea · gatemanager 8250 firmwareMar 5, 2021
CVE-2020-29026
26Monitor
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminis
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
secomea · gatemanager 8250 firmwareFeb 15, 2021
CVE-2022-38124
26Monitor
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
MediumCVSS 6.5No exploitEPSS 1%
secomea · sitemanager 1129 firmwareDec 13, 2022
CVE-2022-25787
26Monitor
GTA URLs issued by LMM WEB API may leak information
MediumCVSS 6.7No exploitEPSS 0%
secomea · gatemanager 4250 firmwareMay 4, 2022
CVE-2020-29029
24Monitor
XSS issue due to insufficient sanitization of input field
MediumCVSS 6.1No exploitEPSS 1%
- pre-auth RCE
- XSS
secomea · gatemanager firmwareMar 5, 2021
CVE-2020-29028
24Monitor
Reflected XSS issues
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
secomea · gatemanager firmwareMar 5, 2021
CVE-2020-29025
24Monitor
DOM-based Javascript injection
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
secomea · sitemanager embeddedFeb 16, 2021
CVE-2021-32009
24Monitor
Missing XSS guards on firmware page
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
secomea · gatemanagerMar 11, 2022