CVE-2022-25780CWE-200

Information leak via device availability query function

Medium · published May 4, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-05-04T13:52Z
EPSS history
Timeline
  • 04 MAY 13:52Z
    Information leak via device availability query function
    cvelistv5