CVE-2021-32002

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware...

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

CVE-2021-32010

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to...

CVE-2022-25784

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

CVE-2023-2912

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

Design/Logic Flaw

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912

CVE-2023-2912 is a reported Use-After-Free in Secomea SiteManager Embedded leading to service disruption (obstruction). Affected product/component: SiteManager Embedded. Root cause: use-after-free condition as described across multiple sources; impact is availability disruption. CVSSv3.1 base sco...

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

PT-2023-22161 · Secomea · Secomea Sitemanager Embedded

Name of the Vulnerable Software and Affected Versions: Secomea SiteManager Embedded affected versions not specified Description: The issue is related to a Use After Free vulnerability, which allows obstruction. There is no information provided about the estimated number of potentially affected...

Secomea SiteManager 资源管理错误漏洞

Secomea SiteManager is a software application from Secomea, Denmark. It provides a remote maintenance function for industrial equipment. A security vulnerability exists in Secomea SiteManager Embedded, which originates from the presence of a post-release reuse vulnerability...

CVE-2022-4308

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...

CVE-2022-38125

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

Input validation

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

Design/Logic Flaw

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...

CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

CVE-2022-38125

CVE-2022-38125 affects Secomea SiteManager, specifically the FTP Agent modules. The root cause is Improper Restriction of Communication Channel to Intended Endpoints, enabling exploitation of trust in the client. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medium) with Local attack vector,...

CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...

CVE-2022-4308

CVE-2022-4308 corresponds to a plaintext password storage vulnerability in Secomea GateManager (USB wizard). The issue allows authentication abuse on SiteManager if the generated file is leaked. Documents identify the affected component as GateManager’s USB wizard and cite plaintext storage of cr...

CVE-2022-4308 Clear-text passwords in configuration files

Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...