CVE-2020-29032

Опубликовано: 05 мар. 2021

Источник: nvd

CVSS3: 8.4

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022

Ссылки

https://www.secomea.com/support/cybersecurity-advisory/#3737
Vendor Advisory
https://www.tenable.com/security/research/tra-2021-06
Third Party Advisory
https://www.secomea.com/support/cybersecurity-advisory/#3737
Vendor Advisory
https://www.tenable.com/security/research/tra-2021-06
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*

Версия до 9.4.621054022 (исключая)

cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00209

Низкий

8.4 High

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-494

CWE-434

Связанные уязвимости

GHSA-j4h9-mpww-v94q

github

больше 3 лет назад

EPSS

Процентиль: 43%

0.00209

Низкий

8.4 High

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-494

CWE-434