CVE-2020-29029

Published: Mar 5, 2021Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.

Affected (1)

Products: Secomea: Gatemanager Firmware

Secomea

1 product

Gatemanager Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Secomea Gatemanager Firmware	Before 9.4.62105402

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://www.secomea.com/support/cybersecurity-advisory/

Source: VulnerabilityReporting@secomea.com

Vendor Advisory

https://www.secomea.com/support/cybersecurity-advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.