Skip to contentSecomea Gatemanager 8250 Firmware vulnerabilities
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreGTA URLs issued by LMM WEB API may leak informationCVE-2022-257877.5 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHacking attempts from logged-in users are not properly logged by GMCVE-2022-257834.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient privilege checks on object access and updates.CVE-2022-257825.4 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreReflected XSS issues in GateManagerCVE-2022-257814.2 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInformation leak via device availability query functionCVE-2022-257804.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient scope checks allows adding unrelated audit log entriesCVE-2022-257794.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreUnload handlers may unintentionally defeat CSRF guardsCVE-2022-257784.2 Medium
- secomea gatemanager, linkmanager, sitemanager +13 more +15 moreClients may connect to a GateManager with TLS 1.0CVE-2021-320105.6 Medium
- secomea gatemanager, gatemanager 8250 firmware +1 moreGateManager does not enforce strict hostname matching for WEB serverCVE-2021-320043.7 Low
- secomea gatemanager, gatemanager 8250 firmware +1 moreAdd integrity check of GateManager firmwareCVE-2020-290328.4 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreCSV Formula Injection possible due to improper fields escaping in GateManagerCVE-2020-290233.5 Low
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHost Header Injection allowing web cache poisoning attacksCVE-2020-290225.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreMissing HtppOnly and Secure flagsCVE-2020-290245.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsecure Direct Object Reference in GateManager WebUI can cause privilege escalationCVE-2020-290317.1 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreA directory traversal vulnerability exists in the file upload function of the GateManager that...CVE-2020-290269.0 Critical
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreScripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)CVE-2020-290213.5 Low
- secomea gatemanager, gatemanager 8250 firmware +1 moreUSE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916CVE-2020-145128.1 High
- secomea gatemanager, gatemanager 8250 firmware +1 moreOFF-BY-ONE ERROR CWE-193CVE-2020-145109.8 Critical
- secomea gatemanager, gatemanager 8250 firmware +1 moreOFF-BY-ONE ERROR CWE-193CVE-2020-145088.1 High
- secomea gatemanager all versions prior to 9.2c gatemanager all versions prior to 9.2c, secomea gatemanager 8250 firmware +1 moreIMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158CVE-2020-1450010.0 Critical