Secomea GateManager
Successful exploitation of these vulnerabilities could allow a remote attacker to gain remote code execution on the device.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14512US | high7.5 | — | ||
GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords. | ||||
| CVE-2020-14510US | critical9.8OT elevated | — | ||
GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root. | ||||
| CVE-2020-14508US | critical9.8 | — | ||
GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-s… | ||||
| CVE-2020-14500US | critical9.8 | — | ||
Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data. | ||||
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-20-210-01 JSONself
- ICS Advisory ICSA-20-210-01 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan