CVE-2020-29020

The vulnerability CVE-2020-29020 affects Secomea SiteManager (hardware) with all versions prior to 9.4.620527004. The root cause is Improper Access Control in the web service, enabling a remote attacker to access the web UI from the internet using configured credentials. Impact is access to the w...

CVE-2021-32003

CVE-2021-32003 affects Secomea SiteManager provisioning/configuration service on hardware; the unprotected transport of credentials allows a local attacker to capture credentials when the service is used after provisioning. Affected: SiteManager versions prior to 9.5. Mitigation per sources is to...

CVE-2021-32002

CVE-2021-32002 relates to an improper access control vulnerability in the Secomea SiteManager web service. Affected product: Secomea SiteManager (hardware) with versions prior to 9.5. Root cause: web service allows a local attacker without credentials to access and gather network information and ...