CVE-2020-29023

Katalog CVE

CVSS 3.5 · Low EPSS 0,55%

Kerentanan Improper Encoding or Escaping of Output pada secomea gatemanager 4250 firmware, secomea gatemanager 4260 firmware +2 lainnya. Skor CVSS 3.1 3.5 (Low) menurut NVD.

Deskripsi (NVD)

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.

Rincian

Terbit di NVD

16 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.5 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-116: Improper Encoding or Escaping of Output

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.secomea.com/support/cybersecurity-advisory/ advisory vendor
• https://www.secomea.com/support/cybersecurity-advisory/#2418 advisory vendor