by Kastro
Paper/Archive/CVE-2020-29020

CVE-2020-29020

Secomea SiteManager — Reject Remote Management via Cellular UPLINK2

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 77.8.778 × 2015.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.

Affected

ProductAffectedFixed inSource
SiteManagerAll – < 9.4.6205270049.4.620527004CNA

Scores by source

Secomea (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refsecomea.com/support/cybersecurity-advisory/#3217