Vulnerabilities > CVE-2021-32004 - Unspecified vulnerability in Secomea Gatemanager 8250 Firmware

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

secomea

NVD

Published: 2021-11-22

Updated: 2021-11-24

Summary

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

Vulnerable Configurations

Part	Description	Count
OS	Secomea Secomea Gatemanager 8250 Firmware 9.1B Secomea Gatemanager 8250 Firmware 9.2 Secomea Gatemanager 8250 Firmware 9.2B Secomea Gatemanager 8250 Firmware 9.2C Secomea Gatemanager 8250 Firmware 9.3 Secomea Gatemanager 8250 Firmware 9.3A Secomea Gatemanager 8250 Firmware 9.4 Secomea Gatemanager 8250 Firmware 9.4.621054022	8
Hardware	Secomea Secomea Gatemanager 8250 -	1

References

https://www.secomea.com/support/cybersecurity-advisory/#4578