Secomea Sitemanager 3349 Firmware vulnerabilities

7 CVEs affecting Secomea Sitemanager 3349 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-38125, published 2023-04-19.

More from Secomea.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-25785, published 2022-05-04. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.
• CVE-2022-25784, published 2022-05-04. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.
• CVE-2021-32005, published 2022-03-10. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version…
• CVE-2022-38124, published 2022-12-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
• CVE-2020-29027, published 2021-02-16. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3.
• CVE-2021-32010, published 2022-05-04. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All…
• CVE-2022-38125, published 2023-04-19. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.