CVE-2020-29031

Katalog CVE

CVSS 8.1 · High EPSS 0,75%

Kerentanan Improper Handling of Insufficient Permissions or Privileges pada secomea gatemanager 8250 firmware, secomea gatemanager 4250 firmware +2 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c

Rincian

Terbit di NVD

15 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-280: Improper Handling of Insufficient Permissions or Privileges
CWE-269: Improper Privilege Management

EPSS (30 hari)

0,75% peluang dieksploitasi; lebih tinggi dari 53,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.secomea.com/support/cybersecurity-advisory/#2920 advisory vendor