Lucene search

SecomeaCVE-2022-38124

HistoryDec 13, 2022 - 2:15 p.m.

CVE-2022-38124

2022-12-1314:15:09

CWE-269

CWE-267

Secomea

web.nvd.nist.gov

cve-2022-38124

debug tool

secomea sitemanager

system state modification

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

35.2%

JSON

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.

Affected configurations

Nvd

Node

secomeasitemanager_1129_firmwareRange<10.0.622425017

AND

secomeasitemanager_1129Match-

Node

secomeasitemanager_3329_firmwareRange<10.0.622425017

AND

secomeasitemanager_3329Match-

Node

secomeasitemanager_1529_firmwareRange<10.0.622425017

AND

secomeasitemanager_1529Match-

Node

secomeasitemanager_3529_firmwareRange<10.0.622425017

AND

secomeasitemanager_3529Match-

Node

secomeasitemanager_1139_firmwareRange<10.0.622425017

AND

secomeasitemanager_1139Match-

Node

secomeasitemanager_3339_firmwareRange<10.0.622425017

AND

secomeasitemanager_3339Match-

Node

secomeasitemanager_1539_firmwareRange<10.0.622425017

AND

secomeasitemanager_1539Match-

Node

secomeasitemanager_3539_firmwareRange<10.0.622425017

AND

secomeasitemanager_3539Match-

Node

secomeasitemanager_1149_firmwareRange<10.0.622425017

AND

secomeasitemanager_1149Match-

Node

secomeasitemanager_3349_firmwareRange<10.0.622425017

AND

secomeasitemanager_3349Match-

Node

secomeasitemanager_1549_firmwareRange<10.0.622425017

AND

secomeasitemanager_1549Match-

Node

secomeasitemanager_3549_firmwareRange<10.0.622425017

AND

secomeasitemanager_3549Match-

VendorProductVersionCPE
secomeasitemanager_1129_firmware*cpe:2.3:o:secomea:sitemanager_1129_firmware:*:*:*:*:*:*:*:*
secomeasitemanager_1129-cpe:2.3:h:secomea:sitemanager_1129:-:*:*:*:*:*:*:*
secomeasitemanager_3329_firmware*cpe:2.3:o:secomea:sitemanager_3329_firmware:*:*:*:*:*:*:*:*
secomeasitemanager_3329-cpe:2.3:h:secomea:sitemanager_3329:-:*:*:*:*:*:*:*
secomeasitemanager_1529_firmware*cpe:2.3:o:secomea:sitemanager_1529_firmware:*:*:*:*:*:*:*:*
secomeasitemanager_1529-cpe:2.3:h:secomea:sitemanager_1529:-:*:*:*:*:*:*:*
secomeasitemanager_3529_firmware*cpe:2.3:o:secomea:sitemanager_3529_firmware:*:*:*:*:*:*:*:*
secomeasitemanager_3529-cpe:2.3:h:secomea:sitemanager_3529:-:*:*:*:*:*:*:*
secomeasitemanager_1139_firmware*cpe:2.3:o:secomea:sitemanager_1139_firmware:*:*:*:*:*:*:*:*
secomeasitemanager_1139-cpe:2.3:h:secomea:sitemanager_1139:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
secomea	sitemanager_1129_firmware	*	cpe:2.3:o:secomea:sitemanager_1129_firmware::::::::
secomea	sitemanager_1129	-	cpe:2.3:h:secomea:sitemanager_1129:-:::::::*
secomea	sitemanager_3329_firmware	*	cpe:2.3:o:secomea:sitemanager_3329_firmware::::::::
secomea	sitemanager_3329	-	cpe:2.3:h:secomea:sitemanager_3329:-:::::::*
secomea	sitemanager_1529_firmware	*	cpe:2.3:o:secomea:sitemanager_1529_firmware::::::::
secomea	sitemanager_1529	-	cpe:2.3:h:secomea:sitemanager_1529:-:::::::*
secomea	sitemanager_3529_firmware	*	cpe:2.3:o:secomea:sitemanager_3529_firmware::::::::
secomea	sitemanager_3529	-	cpe:2.3:h:secomea:sitemanager_3529:-:::::::*
secomea	sitemanager_1139_firmware	*	cpe:2.3:o:secomea:sitemanager_1139_firmware::::::::
secomea	sitemanager_1139	-	cpe:2.3:h:secomea:sitemanager_1139:-:::::::*

Rows per page:

1-10 of 241

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SiteManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThanOrEqual": "10.0.622425017",
        "status": "affected",
        "version": "0",
        "versionType": "\"custom\""
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory/

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

35.2%

JSON

Related for CVE-2022-38124