CVE-2020-14510 OFF-BY-ONE ERROR CWE-193

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

CVE-2020-14510

GateManager (Secomea) VPN server is affected by CVE-2020-14510 due to a hard-coded telnet credential, allowing an unprivileged attacker to execute commands as root. Affected: GateManager versions prior to 9.2c. Mitigation/remediation: update to 9.2c (or newer, per advisories) and apply provided p...

CVE-2020-14508 OFF-BY-ONE ERROR CWE-193

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition...

CVE-2020-14508

CVE-2020-14508 is an off-by-one error in Secomea GateManager prior to version 9.2c that could allow an unauthenticated remote attacker to cause a remote code execution or a denial-of-service condition. Devices affected are GateManager VPN servers (pre-9.2c). The issue is part of a broader set of ...

CVE-2020-14500 IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

CVE-2020-14500

CVE-2020-14500 affects Secomea GateManager (all versions prior to 9.2c). The flaw arises from improper handling of HTTP headers, allowing an unauthenticated remote attacker to send a negative value and overwrite arbitrary data, potentially enabling remote code execution, data tampering, or DoS. I...

CVE-2020-14508: Off-by-one Error

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition...

CVE-2020-14512: Use of Password Hash With Insufficient Computational Effort

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14510: Off-by-one Error

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

CVE-2020-14500: Improper Neutralization of Null Byte or NUL Character

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

CVE-2020-14500

The discovered bug occurs due to improper handling of some of the HTTP request headers provided by the client. This could allow an attacker to remotely exploit GateManager to achieve remote code execution without any authentication required. If carried out successfully, such an attack could resul...

Secomea GateManager Trust Management Issues Vulnerability

Secomea GateManager is a remote access server product from Secomea, Denmark. A trust management issue vulnerability exists in Secomea GateManager versions prior to 9.2c that stems from the program's use of hard-coded credentials. A remote attacker can exploit this vulnerability to execute command...

Secomea GateManager Numeric Error Vulnerability

Secomea GateManager is a remote access server product from Secomea, Denmark. A numeric error vulnerability exists in Secomea GateManager versions prior to 9.2c. The vulnerability arises from a network system or product not properly calculating or converting generated numbers. A remote attacker...

Secomea GateManager Trust Management Issues Vulnerability (CNVD-2020-43750)

Secomea GateManager is a remote access server product from Secomea, Denmark. A trust management issue vulnerability exists in Secomea GateManager versions prior to 9.2c that stems from the program's use of a weak hash type. A remote attacker could exploit this vulnerability to view user passwords...

Secomea GateManager Code Issue Vulnerability

Secomea GateManager is a remote access server product from Secomea, Denmark. A code issue vulnerability exists in Secomea GateManager versions prior to 9.2c. The vulnerability stems from an improper design or implementation during code development for a network system or product. An attacker coul...

Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures

Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational technology OT networks that could allow hackers to overwrite data, execute malicious code, and compromise industrial control systems ICS. A n...

PT-2020-5984

Name of the Vulnerable Software and Affected Versions GateManager versions prior to 9.2c Description The issue is related to a hard-coded credential for telnet in the affected product, allowing an unprivileged attacker to execute commands as root. Additionally, it is described as an error related...

PT-2020-5983

Name of the Vulnerable Software and Affected Versions GateManager versions prior to 9.2c Description The issue is related to an off-by-one error in the GateManager communication server. This error may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition...

PT-2020-5986

Name of the Vulnerable Software and Affected Versions GateManager versions prior to 9.2c Description The issue is related to the use of a weak hash type in the affected product, which may allow an attacker to view user passwords. The vulnerability is associated with insufficient password hash...

PT-2020-5982

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.2c Description The issue is related to pointer dereference errors in the GateManager communication server. An attacker can exploit this by sending a negative value to overwrite arbitrary data, potentiall...