CVE-2021-32004

Low

Description

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

SeverityLow
CVSS3.7
Exploit probability—
ProductSecomea Gatemanager 8250 Firmware
PublishedNov 22, 2021
First seenNov 22, 2021
Weakness typeCWE-923CWE-923

How to fix

Update
  • secomea gatemanager_8250_firmware9.6 or later

Affected products

ProductAffected versionsFixed in
secomea gatemanager_8250_firmwarev < 9.69.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.