Skip to content
OpenAdvisories

Vendor

Secomea

48 known vulnerabilities.

Products

GateManager 37 SiteManager 10 SiteManager Embedded 1 SiteManager Embedded (SM-E) 1 LinkManager 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-25784

    User controllable HTML element attribute (potential XSS)

    Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

    Secomea SiteManager
  • Critical 9.9
    CVE-2021-32008

    Logged-in Administrator may get unrestricted file system access

    This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories.

    Secomea GateManager
  • Critical 9.1
    CVE-2020-29020

    Reject Remote Management via Cellular UPLINK2

    Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.

    Secomea SiteManager
  • Critical 9.0
    CVE-2020-29026

    A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated …

    Secomea GateManager
  • Critical 9.8
    CVE-2020-14510

    OFF-BY-ONE ERROR CWE-193

    GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root.

    Secomea GateManager