CVE-2020-29032

Add integrity check of GateManager firmware

CVSS 8.4 HIGHEPSS 0.5%CWE-494

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Produtos afetados

Secomea · GateManager

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.secomea.com/support/cybersecurity-advisory/#3737 https://www.tenable.com/security/research/tra-2021-06