Approved changes feed: RSS · Atom

cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSecomea (45c78ca4-ff1f-51f3-a5bb-ad82f24f54cd)
ProductGatemanager 8250 Firmware (b1abce73-bd07-5ab4-8051-90b757bc42f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25787 vulnerable 2026-06-08 05:41:49.450606 GTA URLs issued by LMM WEB API may leak information
HIGH (7.5)
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Published: 2022-05-04T13:58:45.000Z
Updated: 2024-08-03T04:49:43.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25783 vulnerable 2026-06-08 05:41:49.430686 Hacking attempts from logged-in users are not properly logged by GM
MEDIUM (4.3)
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:55:13.000Z
Updated: 2024-08-03T04:49:43.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25782 vulnerable 2026-06-08 05:41:49.429940 Insufficient privilege checks on object access and updates.
MEDIUM (5.4)
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:54:16.000Z
Updated: 2024-08-03T04:49:43.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25781 vulnerable 2026-06-08 05:41:49.429281 Reflected XSS issues in GateManager
MEDIUM (4.2)
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Published: 2022-05-04T13:53:17.000Z
Updated: 2024-08-03T04:49:43.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25780 vulnerable 2026-06-08 05:41:49.428671 Information leak via device availability query function
MEDIUM (4.3)
Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
Published: 2022-05-04T13:52:15.000Z
Updated: 2024-08-03T04:49:43.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25779 vulnerable 2026-06-08 05:41:49.428022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25778 vulnerable 2026-06-08 05:41:49.425330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32010 vulnerable 2026-06-08 05:31:54.597097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32004 vulnerable 2026-06-08 05:31:54.574240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29032 vulnerable 2026-06-08 05:23:56.798187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29031 vulnerable 2026-06-08 05:23:56.797396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29026 vulnerable 2026-06-08 05:23:56.779945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29024 vulnerable 2026-06-08 05:23:56.774881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29023 vulnerable 2026-06-08 05:23:56.773984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29022 vulnerable 2026-06-08 05:23:56.773020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29021 vulnerable 2026-06-08 05:23:56.766976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14512 vulnerable 2026-06-08 05:19:23.665615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.