← Back

CVE-2022-38124

nvd nist
Published: Dec 13, 2022Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.2 / Impact: 5.2
Source: NVD

Description

Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.

Affected (12)

Secomea
12 products
Sitemanager 1129 Firmware
Sitemanager 3329 Firmware
Sitemanager 1529 Firmware
Sitemanager 3529 Firmware
Sitemanager 1139 Firmware
Sitemanager 3339 Firmware
Sitemanager 1539 Firmware
Sitemanager 3539 Firmware
Sitemanager 1149 Firmware
Sitemanager 3349 Firmware
Sitemanager 1549 Firmware
Sitemanager 3549 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1129 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1129
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3329 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3329
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1529 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1529
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3529 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3529
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1139 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1139
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3339 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3339
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1539 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1539
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3539 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3539
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1149 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1149
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3349 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3349
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 1549 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 1549
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sitemanager 3549 Firmware
Before 10.0.622425017
Running on/withPlatform Versions
Secomea
Sitemanager 3549
All versions

Related CWEs

CWE-267
Privilege Defined With Unsafe Actions
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: VulnerabilityReporting@secomea.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.