CVE-2021-32010

Published: May 4, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.

Affected (14)

Products: Secomea: Sitemanager 1129 Firmware, Sitemanager 1139 Firmware, Sitemanager 1149 Firmware, Sitemanager 3329 Firmware, Sitemanager 3339 Firmware, Sitemanager 3349 Firmware, Sitemanager 3529 Firmware, Sitemanager 3539 Firmware, Sitemanager 3549 Firmware, Linkmanager, Gatemanager 4250 Firmware, Gatemanager 4260 Firmware, Gatemanager 8250 Firmware, Gatemanager 9250 Firmware

Secomea

14 products

Sitemanager 1129 Firmware

Sitemanager 1139 Firmware

Sitemanager 1149 Firmware

Sitemanager 3329 Firmware

Sitemanager 3339 Firmware

Sitemanager 3349 Firmware

Sitemanager 3529 Firmware

Sitemanager 3539 Firmware

Sitemanager 3549 Firmware

Linkmanager

Gatemanager 4250 Firmware

Gatemanager 4260 Firmware

Gatemanager 8250 Firmware

Gatemanager 9250 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1129 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 1129	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1139 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 1139	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1149 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 1149	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3329 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3329	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3339 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3339	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3349 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3349	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3529 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3529	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3539 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3539	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3549 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Sitemanager 3549	All versions

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Secomea Linkmanager	Before 9.7.622134021

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Gatemanager 4250 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Gatemanager 4250	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Gatemanager 4260 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Gatemanager 4260	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Gatemanager 8250 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Gatemanager 8250	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Gatemanager 9250 Firmware	Before 9.7.622134021

Running on/with	Platform Versions
Secomea Gatemanager 9250	All versions

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

https://www.secomea.com/support/cybersecurity-advisory/

Source: VulnerabilityReporting@secomea.com

Vendor Advisory

https://www.secomea.com/support/cybersecurity-advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.