CVE-2021-32003

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

Score

CVSS 3.1 8.0 High

Status

Modified - VulnerabilityReporting@secomea.com

Published

2021-08-05

Last modified

2024-08-03

Weaknesses

CWE-522, CWE-523

Affected products

• Sitemanager (Secomea)
• Sitemanager Firmware (Secomea)

References

• https://www.secomea.com/support/cybersecurity-advisory