Sign-up

ID

VAR-202212-0644


CVE

CVE-2022-38123


TITLE

Secomea GateManager Input validation error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578

DESCRIPTION

Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions prior to 10.0.

Trust: 1.0

sources: NVD: CVE-2022-38123

AFFECTED PRODUCTS

vendor:secomeamodel:gatemanagerscope:ltversion:10.0.622395010

Trust: 1.0

sources: NVD: CVE-2022-38123

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-38123
value: HIGH

Trust: 1.0

VulnerabilityReporting@secomea.com: CVE-2022-38123
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202212-2578
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2022-38123
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.2
impactScore: 5.9
version: 3.1

Trust: 1.0

VulnerabilityReporting@secomea.com: CVE-2022-38123
baseSeverity: HIGH
baseScore: 8.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.3
impactScore: 5.8
version: 3.1

Trust: 1.0

sources: CNNVD: CNNVD-202212-2578 // NVD: CVE-2022-38123 // NVD: CVE-2022-38123

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.0

sources: NVD: CVE-2022-38123

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578

PATCH

title:Secomea GateManager Enter the fix for the verification error vulnerabilityurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=216874

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578

EXTERNAL IDS

db:NVDid:CVE-2022-38123

Trust: 1.6

db:CNNVDid:CNNVD-202212-2578

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578 // NVD: CVE-2022-38123

REFERENCES

url:https://www.secomea.com/support/cybersecurity-advisory/

Trust: 1.6

url:https://cxsecurity.com/cveshow/cve-2022-38123/

Trust: 0.6

sources: CNNVD: CNNVD-202212-2578 // NVD: CVE-2022-38123

SOURCES

db:CNNVDid:CNNVD-202212-2578
db:NVDid:CVE-2022-38123

LAST UPDATE DATE

2024-08-14T15:37:17.798000+00:00


SOURCES UPDATE DATE

db:CNNVDid:CNNVD-202212-2578date:2022-12-09T00:00:00
db:NVDid:CVE-2022-38123date:2023-11-07T03:50:03.110

SOURCES RELEASE DATE

db:CNNVDid:CNNVD-202212-2578date:2022-12-06T00:00:00
db:NVDid:CVE-2022-38123date:2022-12-06T16:15:10.567