CVE-2020-29022: Secomea Gatemanager 4250 Firmware

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3

Affected products

• Secomea Gatemanager 4250 Firmware: any version
• Secomea Gatemanager 4260 Firmware: any version
• Secomea Gatemanager 8250 Firmware: before 9.3 (fixed in 9.3)
• Secomea Gatemanager 9250 Firmware: any version

Published 2021-02-16. Last modified 2026-06-17.