Approved changes feed: RSS · Atom

cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSecomea (45c78ca4-ff1f-51f3-a5bb-ad82f24f54cd)
ProductGatemanager 9250 Firmware (0aaa54e3-7376-56de-bc0b-15ce1019d580)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25787 vulnerable 2026-06-08 05:41:49.450640 GTA URLs issued by LMM WEB API may leak information
HIGH (7.5)
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Published: 2022-05-04T13:58:45.000Z
Updated: 2024-08-03T04:49:43.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25783 vulnerable 2026-06-08 05:41:49.430723 Hacking attempts from logged-in users are not properly logged by GM
MEDIUM (4.3)
Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:55:13.000Z
Updated: 2024-08-03T04:49:43.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25782 vulnerable 2026-06-08 05:41:49.430096 Insufficient privilege checks on object access and updates.
MEDIUM (5.4)
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.
Published: 2022-05-04T13:54:16.000Z
Updated: 2024-08-03T04:49:43.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25781 vulnerable 2026-06-08 05:41:49.429314 Reflected XSS issues in GateManager
MEDIUM (4.2)
Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.
Published: 2022-05-04T13:53:17.000Z
Updated: 2024-08-03T04:49:43.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25780 vulnerable 2026-06-08 05:41:49.428703 Information leak via device availability query function
MEDIUM (4.3)
Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.
Published: 2022-05-04T13:52:15.000Z
Updated: 2024-08-03T04:49:43.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25779 vulnerable 2026-06-08 05:41:49.428057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25778 vulnerable 2026-06-08 05:41:49.426796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32010 vulnerable 2026-06-08 05:31:54.598161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29031 vulnerable 2026-06-08 05:23:56.797610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29026 vulnerable 2026-06-08 05:23:56.780226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29024 vulnerable 2026-06-08 05:23:56.774740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29023 vulnerable 2026-06-08 05:23:56.773865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29022 vulnerable 2026-06-08 05:23:56.772984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29021 vulnerable 2026-06-08 05:23:56.771483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.