Skip to content
Secomea Gatemanager vulnerabilities
-
secomea gatemanager
Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager...
CVE-2026-1759
6.5 Medium
-
secomea gatemanager
Session Fixation
CVE-2026-1758
8.3 High
-
secomea gatemanager
Unauthorized access to information
CVE-2025-14716
6.5 Medium
-
secomea gatemanager
Missing security header: Referrer-Policy URL
CVE-2021-32007
3.5 Low
-
secomea gatemanager
Heap buffer overflow
CVE-2024-1969
8.2 High
-
secomea gatemanager
Insufficient seeding of random number generator
CVE-2024-1579
8.1 High
-
secomea gatemanager
Insufficient input validation when downloading certain file types.
CVE-2023-3675
6.5 Medium
-
secomea gatemanager
GateManager debug interface is included in non-debug builds
CVE-2023-0317
4.9 Medium
-
secomea gatemanager
Clear-text passwords in configuration files
CVE-2022-4308
6.1 Medium
-
secomea gatemanager
Potential vulnerabilities in GM login process
CVE-2022-2752
5.5 Medium
-
secomea gatemanager
Insufficient validation of plugin files
CVE-2022-38123
8.7 High
-
secomea gatemanager
GateManager debug interface is included in production builds
CVE-2022-25786
4.9 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
GTA URLs issued by LMM WEB API may leak information
CVE-2022-25787
7.5 High
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Hacking attempts from logged-in users are not properly logged by GM
CVE-2022-25783
4.3 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Insufficient privilege checks on object access and updates.
CVE-2022-25782
5.4 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Reflected XSS issues in GateManager
CVE-2022-25781
4.2 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Information leak via device availability query function
CVE-2022-25780
4.3 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Insufficient scope checks allows adding unrelated audit log entries
CVE-2022-25779
4.3 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Unload handlers may unintentionally defeat CSRF guards
CVE-2022-25778
4.2 Medium
-
secomea gatemanager, linkmanager, sitemanager +13 more +15 more
Clients may connect to a GateManager with TLS 1.0
CVE-2021-32010
5.6 Medium
-
secomea gatemanager
Missing XSS guards on firmware page
CVE-2021-32009
5.0 Medium
-
secomea gatemanager
GateManager information leak for LinkManager Users
CVE-2021-32006
5.0 Medium
-
secomea gatemanager
Logged-in Administrator may get unrestricted file system access
CVE-2021-32008
9.9 Critical
-
secomea gatemanager, gatemanager 8250 firmware +1 more
GateManager does not enforce strict hostname matching for WEB server
CVE-2021-32004
3.7 Low
-
secomea gatemanager, gatemanager firmware +1 more
Insufficient CSRF guards
CVE-2020-29030
8.1 High
-
secomea gatemanager, gatemanager firmware +1 more
Reflected XSS issues
CVE-2020-29028
6.3 Medium
-
secomea gatemanager, gatemanager firmware +1 more
XSS issue due to insufficient sanitization of input field
CVE-2020-29029
7.3 High
-
secomea gatemanager, gatemanager 8250 firmware +1 more
Add integrity check of GateManager firmware
CVE-2020-29032
8.4 High
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
CSV Formula Injection possible due to improper fields escaping in GateManager
CVE-2020-29023
3.5 Low
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Host Header Injection allowing web cache poisoning attacks
CVE-2020-29022
5.3 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Missing HtppOnly and Secure flags
CVE-2020-29024
5.3 Medium
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
CVE-2020-29031
7.1 High
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
A directory traversal vulnerability exists in the file upload function of the GateManager that...
CVE-2020-29026
9.0 Critical
-
secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more
Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)
CVE-2020-29021
3.5 Low
-
b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more
GateManager Log Information Disclosure Vulnerability
CVE-2020-11646
4.3 Medium
-
b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more
GateManager Denial of Service Vulnerability
CVE-2020-11645
6.5 Medium
-
b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more
GateManager Audit Message Spoofing Vulnerability
CVE-2020-11644
6.5 Medium
-
b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more
GateManager Information Disclosure Vulnerability
CVE-2020-11643
6.5 Medium
-
secomea gatemanager, gatemanager 8250 firmware +1 more
USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916
CVE-2020-14512
8.1 High
-
secomea gatemanager, gatemanager 8250 firmware +1 more
OFF-BY-ONE ERROR CWE-193
CVE-2020-14510
9.8 Critical
-
secomea gatemanager, gatemanager 8250 firmware +1 more
OFF-BY-ONE ERROR CWE-193
CVE-2020-14508
8.1 High
-
secomea gatemanager all versions prior to 9.2c gatemanager all versions prior to 9.2c, secomea gatemanager 8250 firmware +1 more
IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158
CVE-2020-14500
10.0 Critical