5.5

CVE-2022-38125

FTP Agent forwards traffic on inactive ports to LinkManager

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Secomea ≫ Sitemanager 3549 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3549 Version -
Secomea ≫ Sitemanager 3539 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3539 Version -
Secomea ≫ Sitemanager 3529 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3529 Version -
Secomea ≫ Sitemanager 3349 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3349 Version -
Secomea ≫ Sitemanager 3339 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3339 Version -
Secomea ≫ Sitemanager 3329 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 3329 Version -
Secomea ≫ Sitemanager 1549 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1549 Version -
Secomea ≫ Sitemanager 1539 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1539 Version -
Secomea ≫ Sitemanager 1529 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1529 Version -
Secomea ≫ Sitemanager 1149 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1149 Version -
Secomea ≫ Sitemanager 1139 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1139 Version -
Secomea ≫ Sitemanager 1129 Firmware Version < 10.0.622465022
   Secomea ≫ Sitemanager 1129 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
VulnerabilityReporting@secomea.com 2.9 1.2 1.4
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

https://www.secomea.com/support/cybersecurity-advisory/
Vendor Advisory