CVE-2020-29032

High

Description

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022

SeverityHigh
CVSS8.4
Exploit probability41. percentile0.5%
ProductSecomea Gatemanager 8250 Firmware
PublishedMar 5, 2021
First seenMar 5, 2021
Weakness typeCWE-494CWE-494

How to fix

Update
  • secomea gatemanager_8250_firmware9.4.621054022 or later

Affected products

ProductAffected versionsFixed in
secomea gatemanager_8250_firmwarev < 9.4.6210540229.4.621054022

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.