CVE-2020-29026: critical vulnerability in Secomea GateManager
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9epss 1.5%
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
Affected products
Secomea · GateManagerRelated CVEs — Secomea GateManager
In the same product, most dangerous first.
CVE-2020-14510CRITICALOFF-BY-ONE ERROR CWE-193EPSS 2.5%CVE-2020-14508HIGHOFF-BY-ONE ERROR CWE-193EPSS 2.0%CVE-2021-32008CRITICALLogged-in Administrator may get unrestricted file system accessEPSS 1.0%CVE-2020-29022MEDIUMHost Header Injection allowing web cache poisoning attacksEPSS 0.8%CVE-2020-14512HIGHUSE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916EPSS 0.8%CVE-2022-38123HIGHInsufficient validation of plugin filesEPSS 0.8%