Secomea GateManager
Successful exploitation of these vulnerabilities could allow a remote attacker to gain remote code execution on the device.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-14512US | high7.5 | — | ||
GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords. | ||||
| CVE-2020-14510US | critical9.8OT erhöht | — | ||
GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root. | ||||
| CVE-2020-14508US | critical9.8 | — | ||
GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-s… | ||||
| CVE-2020-14500US | critical9.8 | — | ||
Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-20-210-01 JSONself
- ICS Advisory ICSA-20-210-01 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager - MitigationGateManager
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
https://kb.secomea.com/helpdesk/KB/View/25546482-downloads-gatemanager
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan