CVE-2021-32002CWE-200CWE-284

SiteManager troubleshooter allows access without authentication from local network

Medium · published August 5, 2021

CVSS v3.1
4.3
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-284 · Improper Access Control
Published
2021-08-05T20:33Z
EPSS history
Timeline
  • 05 AUG 20:33Z
    SiteManager troubleshooter allows access without authentication from local network
    cvelistv5