Secomea Sitemanager Firmware vulnerabilities

3 CVEs affecting Secomea Sitemanager Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-32003, published 2021-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-29020, published 2021-03-05. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea…
CVE-2021-32002, published 2021-08-05. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue…
CVE-2021-32003, published 2021-08-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects:…