Secomea vulnerabilities
48 CVEs and advisories name Secomea as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-32003Configuration service port remains open 10 minutes after reboot even when already provisioned
- CVE-2021-32002SiteManager troubleshooter allows access without authentication from local network
- CVE-2020-29030Insufficient CSRF guards
- CVE-2020-29020Reject Remote Management via Cellular UPLINK2
- CVE-2020-29028Reflected XSS issues
- CVE-2020-29029XSS issue due to insufficient sanitization of input field
- CVE-2020-29032Add integrity check of GateManager firmware
- CVE-2020-29027Reflected Cross Site Scripting
- CVE-2020-29025DOM-based Javascript injection
- CVE-2020-29023CSV Formula Injection possible due to improper fields escaping in GateManager
- CVE-2020-29022Host Header Injection allowing web cache poisoning attacks
- CVE-2020-29024Missing HtppOnly and Secure flags
- CVE-2020-29031Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
- CVE-2020-29026A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with adminis
- CVE-2020-29021Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)
- CVE-2020-14512USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916
- CVE-2020-14510OFF-BY-ONE ERROR CWE-193
- CVE-2020-14508OFF-BY-ONE ERROR CWE-193