CVE-2022-38124
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - VulnerabilityReporting@secomea.com
- Published
- 2022-12-13
- Last modified
- 2025-04-18
- Weaknesses
- CWE-267, CWE-269
Affected products
- Sitemanager (Secomea)
- Sitemanager 1129 Firmware (Secomea)
- Sitemanager 1139 Firmware (Secomea)
- Sitemanager 1149 Firmware (Secomea)
- Sitemanager 1529 Firmware (Secomea)
- Sitemanager 1539 Firmware (Secomea)
- Sitemanager 1549 Firmware (Secomea)
- Sitemanager 3329 Firmware (Secomea)
- Sitemanager 3339 Firmware (Secomea)
- Sitemanager 3349 Firmware (Secomea)
- Sitemanager 3529 Firmware (Secomea)
- Sitemanager 3539 Firmware (Secomea)
- Sitemanager 3549 Firmware (Secomea)
References
- https://www.secomea.com/support/cybersecurity-advisory/