Lucene search
+L

383 matches found

Cvelist
Cvelist
•added 2023/04/19 11:58 a.m.•39 views

CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

2.9CVSS5.7AI score0.00157EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/19 11:58 a.m.•104 views

CVE-2022-38125

CVE-2022-38125 affects Secomea SiteManager, specifically the FTP Agent modules. The root cause is Improper Restriction of Communication Channel to Intended Endpoints, enabling exploitation of trust in the client. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medium) with Local attack vector,...

5.5CVSS4.6AI score0.00157EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/19 11:56 a.m.•16 views

CVE-2022-4308 Clear-text passwords in configuration files

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...

6.1CVSS6.9AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/19 11:56 a.m.•53 views

CVE-2022-4308 Clear-text passwords in configuration files

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...

6.1CVSS8.9AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/19 11:56 a.m.•101 views

CVE-2022-4308

CVE-2022-4308 corresponds to a plaintext password storage vulnerability in Secomea GateManager (USB wizard). The issue allows authentication abuse on SiteManager if the generated file is leaked. Documents identify the affected component as GateManager’s USB wizard and cite plaintext storage of cr...

8.8CVSS7.4AI score0.0017EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/04/19 12:00 a.m.•20 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager that stems from a password plaintext storage vulnerability...

8.8CVSS8AI score0.0017EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/19 12:00 a.m.•11 views

CVE-2022-38125: Improper Restriction of Communication Channel to Intended Endpoints

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/19 12:00 a.m.•6 views

CVE-2022-4308: Plaintext Storage of a Password

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...

8.8CVSS5.8AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/04/19 12:00 a.m.•20 views

PT-2023-14174 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager affected versions not specified Description: The issue concerns a Plaintext Storage of a Password vulnerability in the USB wizard component of Secomea GateManager. This vulnerability allows for authentication abuse on...

8.8CVSS7.1AI score0.0017EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/04/19 12:00 a.m.•20 views

Secomea SiteManager 安全漏洞

Secomea SiteManager is a software application from Secomea, Denmark. It provides a remote maintenance function for industrial equipment. A security vulnerability exists in Secomea SiteManager that stems from the presence of a communication channel that improperly restricts the intended endpoints...

5.5CVSS5.8AI score0.00157EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/13 2:15 p.m.•35 views

CVE-2022-38124

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...

6.5CVSS0.00548EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/13 2:15 p.m.•47 views

Code injection

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...

4.7CVSS6.4AI score0.00548EPSS
SaveExploits0References1Affected Software12
Cvelist
Cvelist
•added 2022/12/13 1:06 p.m.•41 views

CVE-2022-38124 Unwanted debug tool

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...

5.7CVSS6.6AI score0.00548EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/13 1:06 p.m.•19 views

CVE-2022-38124 Unwanted debug tool

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...

5.7CVSS6.4AI score0.00548EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/13 1:06 p.m.•110 views

CVE-2022-38124

CVE-2022-38124 concerns Secomea SiteManager. Documents describe a debugging tool that, when accessed by a logged-in administrator, allows modification of the system state in an unintended manner. Concrete impact details are limited to this behavior; no explicit exploitation, affected versions, ro...

6.5CVSS5.9AI score0.00548EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•24 views

PT-2022-24218 · Secomea · Secomea Sitemanager

Name of the Vulnerable Software and Affected Versions: Secomea SiteManager affected versions not specified Description: The issue allows a logged-in administrator to modify the system state in an unintended manner through a debug tool. Recommendations: At the moment, there is no information about...

6.5CVSS6.3AI score0.00548EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•12 views

CVE-2022-38124: Privilege Defined With Unsafe Actions

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner...

6.5CVSS5.8AI score0.00548EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•25 views

Secomea SiteManager 安全漏洞

Secomea SiteManager is a software application from Secomea, Denmark. It provides a remote maintenance function for industrial equipment. A security vulnerability exists in Secomea SiteManager that stems from a debugging tool that allows logged-in administrators to modify the system state in an...

6.5CVSS6.6AI score0.00548EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/09 2:15 p.m.•32 views

CVE-2022-2752

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

7.8CVSS0.00183EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/09 2:15 p.m.•33 views

Design/Logic Flaw

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

4.3CVSS7.4AI score0.00183EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder