CVE-2022-38125

Published: Apr 19, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

Affected (12)

Products: Secomea: Sitemanager 3549 Firmware, Sitemanager 3539 Firmware, Sitemanager 3529 Firmware, Sitemanager 3349 Firmware, Sitemanager 3339 Firmware, Sitemanager 3329 Firmware, Sitemanager 1549 Firmware, Sitemanager 1539 Firmware, Sitemanager 1529 Firmware, Sitemanager 1149 Firmware, Sitemanager 1139 Firmware, Sitemanager 1129 Firmware

Secomea

12 products

Sitemanager 3549 Firmware

Sitemanager 3539 Firmware

Sitemanager 3529 Firmware

Sitemanager 3349 Firmware

Sitemanager 3339 Firmware

Sitemanager 3329 Firmware

Sitemanager 1549 Firmware

Sitemanager 1539 Firmware

Sitemanager 1529 Firmware

Sitemanager 1149 Firmware

Sitemanager 1139 Firmware

Sitemanager 1129 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3549 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3549	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3539 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3539	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3529 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3529	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3349 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3349	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3339 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3339	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 3329 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 3329	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1549 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1549	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1539 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1539	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1529 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1529	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1149 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1149	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1139 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1139	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Secomea Sitemanager 1129 Firmware	Before 10.0.622465022

Running on/with	Platform Versions
Secomea Sitemanager 1129	All versions

Related CWEs

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (2)

https://www.secomea.com/support/cybersecurity-advisory/

Source: VulnerabilityReporting@secomea.com

Vendor Advisory

https://www.secomea.com/support/cybersecurity-advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.