Vulnerability · Published Mar 5, 2021 · Assigned by Secomea
CVE-2020-29032Add integrity check of GateManager firmware
High 8.4
In plain English
A high-severity security flaw in GateManager from Secomea. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.5%top 58.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Secomea | GateManager | all – before 9.4.621054022 |
Weakness: CWE-494 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
References
- https://www.tenable.com/security/research/tra-2021-06 x_refsource_MISC
- https://www.secomea.com/support/cybersecurity-advisory/#3737 x_refsource_MISC