Cross site request forgery (csrf)

2022-05-0414:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.

CPENameOperatorVersion
gatemanager_4250_firmwarelt9.7.622134021
gatemanager_4260_firmwarelt9.7.622134021
gatemanager_8250_firmwarelt9.7.622134021
gatemanager_9250_firmwarelt9.7.622134021

Name	Operator	Version
gatemanager_4250_firmware	lt	9.7.622134021
gatemanager_4260_firmware	lt	9.7.622134021
gatemanager_8250_firmware	lt	9.7.622134021
gatemanager_9250_firmware	lt	9.7.622134021

References

www.secomea.com/support/cybersecurity-advisory/