CVE-2022-25778

Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*

History

11 May 2022, 18:44

Type Values Removed Values Added
First Time Secomea gatemanager 8250
Secomea gatemanager 4260 Firmware
Secomea gatemanager 4250
Secomea gatemanager 4250 Firmware
Secomea gatemanager 8250 Firmware
Secomea
Secomea gatemanager 4260
Secomea gatemanager 9250
Secomea gatemanager 9250 Firmware
References (MISC) https://www.secomea.com/support/cybersecurity-advisory/ - (MISC) https://www.secomea.com/support/cybersecurity-advisory/ - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 6.8
v3 : 8.8
CWE CWE-352
CPE cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*
cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*
cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*
cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*

04 May 2022, 15:35

Type Values Removed Values Added
New CVE

Information

Published : 2022-05-04 14:15

Updated : 2022-05-11 18:44


NVD link : CVE-2022-25778

Mitre link : CVE-2022-25778


JSON object : View

Products Affected

secomea

  • gatemanager_4260_firmware
  • gatemanager_9250_firmware
  • gatemanager_9250
  • gatemanager_8250_firmware
  • gatemanager_4250_firmware
  • gatemanager_4260
  • gatemanager_8250
  • gatemanager_4250
CWE
CWE-352

Cross-Site Request Forgery (CSRF)