Skip to contentSecomea Gatemanager 4260 Firmware vulnerabilities
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreGTA URLs issued by LMM WEB API may leak informationCVE-2022-257877.5 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHacking attempts from logged-in users are not properly logged by GMCVE-2022-257834.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient privilege checks on object access and updates.CVE-2022-257825.4 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreReflected XSS issues in GateManagerCVE-2022-257814.2 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInformation leak via device availability query functionCVE-2022-257804.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient scope checks allows adding unrelated audit log entriesCVE-2022-257794.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreUnload handlers may unintentionally defeat CSRF guardsCVE-2022-257784.2 Medium
- secomea gatemanager, linkmanager, sitemanager +13 more +15 moreClients may connect to a GateManager with TLS 1.0CVE-2021-320105.6 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreCSV Formula Injection possible due to improper fields escaping in GateManagerCVE-2020-290233.5 Low
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHost Header Injection allowing web cache poisoning attacksCVE-2020-290225.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreMissing HtppOnly and Secure flagsCVE-2020-290245.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsecure Direct Object Reference in GateManager WebUI can cause privilege escalationCVE-2020-290317.1 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreA directory traversal vulnerability exists in the file upload function of the GateManager that...CVE-2020-290269.0 Critical
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreScripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)CVE-2020-290213.5 Low