Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-32002
HistoryAug 05, 2021 - 9:15 p.m.

CVE-2021-32002

2021-08-0521:15:11
CWE-200
CWE-284
[email protected]
web.nvd.nist.gov
4
vulnerability
access control
secomea sitemanager
web service
network information
configuration.

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

5.1%

JSON

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

Affected configurations

Nvd
Node
secomeasitemanager_firmwareRange<9.5.621256022
AND
secomeasitemanagerMatch-
VendorProductVersionCPE
secomeasitemanager_firmware*cpe:2.3:o:secomea:sitemanager_firmware:*:*:*:*:*:*:*:*
secomeasitemanager-cpe:2.3:h:secomea:sitemanager:-:*:*:*:*:*:*:*

Related

prion 1
cve 1
cvelist 1
prion
prion
Improper access control
2021-08-05 21:15:00
cve
cve
CVE-2021-32002
2021-08-05 21:15:11
cvelist
cvelist
CVE-2021-32002 SiteManager troubleshooter allows access without authentication from local network
2021-08-05 20:33:27

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2021-32002
prion1cve1cvelist1