Vulnerability · Published Mar 5, 2021 · Assigned by Secomea
CVE-2020-29020Reject Remote Management via Cellular UPLINK2
Critical 9.1
In plain English
A critical-severity improper access control in SiteManager from Secomea. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)1.7%top 22.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Secomea | SiteManager | All – before 9.4.620527004 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://www.secomea.com/support/cybersecurity-advisory/#3217 x_refsource_MISC