CVE-2022-38124
Medium
Description
Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
SeverityMedium
CVSS5.7
Exploit probability—
ProductSecomea Sitemanager 1129 Firmware
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-267CWE-267
How to fix
Update
- secomea sitemanager_1129_firmware10.0.622425017 or later
- secomea sitemanager_3329_firmware10.0.622425017 or later
- secomea sitemanager_1529_firmware10.0.622425017 or later
- secomea sitemanager_3529_firmware10.0.622425017 or later
- secomea sitemanager_1139_firmware10.0.622425017 or later
- secomea sitemanager_3339_firmware10.0.622425017 or later
- secomea sitemanager_1539_firmware10.0.622425017 or later
- secomea sitemanager_3539_firmware10.0.622425017 or later
- secomea sitemanager_1149_firmware10.0.622425017 or later
- secomea sitemanager_3349_firmware10.0.622425017 or later
- secomea sitemanager_1549_firmware10.0.622425017 or later
- secomea sitemanager_3549_firmware10.0.622425017 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| secomea sitemanager_1129_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3329_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_1529_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3529_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_1139_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3339_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_1539_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3539_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_1149_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3349_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_1549_firmware | v < 10.0.622425017 | 10.0.622425017 |
| secomea sitemanager_3549_firmware | v < 10.0.622425017 | 10.0.622425017 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.