Secomea vulnerabilities

Products

• Gatemanager 41
• Gatemanager 8250 Firmware 20
• Gatemanager 4250 Firmware 14
• Gatemanager 4260 Firmware 14
• Gatemanager 9250 Firmware 14
• Sitemanager 12
• Sitemanager 1129 Firmware 7
• Sitemanager 1139 Firmware 7
• Sitemanager 1149 Firmware 7
• Sitemanager 3329 Firmware 7
• Sitemanager 3339 Firmware 7
• Sitemanager 3349 Firmware 7
• Sitemanager 3529 Firmware 7
• Sitemanager 3539 Firmware 7
• Sitemanager 3549 Firmware 7
• Gatemanager Firmware 3
• Sitemanager Firmware 3
• Sitemanager 1529 Firmware 2
• Sitemanager 1539 Firmware 2
• Sitemanager 1549 Firmware 2
• Sitemanager Embedded 2

Newest

• secomea gatemanager Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager... CVE-2026-1759 6.5 MediumSeptember 15, 2026
• secomea gatemanager Session Fixation CVE-2026-1758 8.3 HighSeptember 15, 2026
• secomea gatemanager Unauthorized access to information CVE-2025-14716 6.5 MediumMarch 19, 2026
• secomea gatemanager Missing security header: Referrer-Policy URL CVE-2021-32007 3.5 LowDecember 13, 2024
• secomea gatemanager Heap buffer overflow CVE-2024-1969 8.2 HighApril 29, 2024
• secomea gatemanager Insufficient seeding of random number generator CVE-2024-1579 8.1 HighApril 29, 2024
• secomea gatemanager Insufficient input validation when downloading certain file types. CVE-2023-3675 6.5 MediumApril 18, 2024
• secomea sitemanager embedded SiteManager Embedded service disruption CVE-2023-2912 5.9 MediumJuly 17, 2023
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 more FTP Agent forwards traffic on inactive ports to LinkManager CVE-2022-38125 2.9 LowApril 19, 2023
• secomea gatemanager GateManager debug interface is included in non-debug builds CVE-2023-0317 4.9 MediumApril 19, 2023
• secomea gatemanager Clear-text passwords in configuration files CVE-2022-4308 6.1 MediumApril 19, 2023
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 more Unwanted debug tool CVE-2022-38124 5.7 MediumDecember 13, 2022
• secomea gatemanager Potential vulnerabilities in GM login process CVE-2022-2752 5.5 MediumDecember 9, 2022
• secomea gatemanager Insufficient validation of plugin files CVE-2022-38123 8.7 HighDecember 6, 2022
• secomea gatemanager GateManager debug interface is included in production builds CVE-2022-25786 4.9 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more GTA URLs issued by LMM WEB API may leak information CVE-2022-25787 7.5 HighMay 4, 2022
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 more Buffer overrun CVE-2022-25785 6.6 MediumMay 4, 2022
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 more User controllable HTML element attribute (potential XSS) CVE-2022-25784 9.1 CriticalMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Hacking attempts from logged-in users are not properly logged by GM CVE-2022-25783 4.3 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Insufficient privilege checks on object access and updates. CVE-2022-25782 5.4 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Reflected XSS issues in GateManager CVE-2022-25781 4.2 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Information leak via device availability query function CVE-2022-25780 4.3 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Insufficient scope checks allows adding unrelated audit log entries CVE-2022-25779 4.3 MediumMay 4, 2022
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Unload handlers may unintentionally defeat CSRF guards CVE-2022-25778 4.2 MediumMay 4, 2022
• secomea gatemanager, linkmanager, sitemanager +13 more +15 more Clients may connect to a GateManager with TLS 1.0 CVE-2021-32010 5.6 MediumMay 4, 2022
• secomea gatemanager Missing XSS guards on firmware page CVE-2021-32009 5.0 MediumMarch 11, 2022
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 more SiteManager Log View XSS Issue CVE-2021-32005 6.5 MediumMarch 7, 2022
• secomea gatemanager GateManager information leak for LinkManager Users CVE-2021-32006 5.0 MediumMarch 7, 2022
• secomea gatemanager Logged-in Administrator may get unrestricted file system access CVE-2021-32008 9.9 CriticalMarch 4, 2022
• secomea gatemanager, gatemanager 8250 firmware +1 more GateManager does not enforce strict hostname matching for WEB server CVE-2021-32004 3.7 LowNovember 22, 2021
• secomea sitemanager, sitemanager firmware +1 more Configuration service port remains open 10 minutes after reboot even when already provisioned CVE-2021-32003 8.0 HighAugust 5, 2021
• secomea sitemanager, sitemanager firmware +1 more SiteManager troubleshooter allows access without authentication from local network CVE-2021-32002 4.3 MediumAugust 5, 2021
• secomea gatemanager, gatemanager firmware +1 more Insufficient CSRF guards CVE-2020-29030 8.1 HighMarch 5, 2021
• secomea sitemanager, sitemanager firmware +1 more Reject Remote Management via Cellular UPLINK2 CVE-2020-29020 9.1 CriticalMarch 5, 2021
• secomea gatemanager, gatemanager firmware +1 more Reflected XSS issues CVE-2020-29028 6.3 MediumMarch 5, 2021
• secomea gatemanager, gatemanager firmware +1 more XSS issue due to insufficient sanitization of input field CVE-2020-29029 7.3 HighMarch 5, 2021
• secomea gatemanager, gatemanager 8250 firmware +1 more Add integrity check of GateManager firmware CVE-2020-29032 8.4 HighMarch 5, 2021
• secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 more Reflected Cross Site Scripting CVE-2020-29027 5.4 MediumFebruary 16, 2021
• secomea sitemanager embedded (sm-e), sitemanager embedded +1 more DOM-based Javascript injection CVE-2020-29025 5.4 MediumFebruary 16, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more CSV Formula Injection possible due to improper fields escaping in GateManager CVE-2020-29023 3.5 LowFebruary 16, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Host Header Injection allowing web cache poisoning attacks CVE-2020-29022 5.3 MediumFebruary 16, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Missing HtppOnly and Secure flags CVE-2020-29024 5.3 MediumFebruary 16, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation CVE-2020-29031 7.1 HighFebruary 15, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more A directory traversal vulnerability exists in the file upload function of the GateManager that... CVE-2020-29026 9.0 CriticalFebruary 15, 2021
• secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS) CVE-2020-29021 3.5 LowFebruary 8, 2021
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Log Information Disclosure Vulnerability CVE-2020-11646 4.3 MediumOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Denial of Service Vulnerability CVE-2020-11645 6.5 MediumOctober 15, 2020
• b&r sitemanager SiteManager Denial of Service via Local File Inclusion Vulnerability CVE-2020-11642 7.7 HighOctober 15, 2020
• b&r sitemanager SiteManager Local File Inclusion Vulnerability CVE-2020-11641 7.7 HighOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Audit Message Spoofing Vulnerability CVE-2020-11644 6.5 MediumOctober 15, 2020
• Show olderLoading…