Skip to content
OpenAdvisories
High · 8.0 CVE-2021-32003 EUVD-2021-18873GHSA-c7vw-6v5h-6fj3

Configuration service port remains open 10 minutes after reboot even when already provisioned

Published Aug 5, 2021 · Updated Aug 3, 2024 · Assigned by Secomea

Description

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

Affected products

VendorProductAffectedFixed
Secomea SiteManager All – < 9.5 9.5

References