CVE-2021-32010

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 04-05-2022 04:15

Last modified: - 11-05-2022 08:43

Total changes: - 2

Description

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

8.1

Base score

2.2

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=secomea AND product=sitemanager_1129_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_1129 AND version=-

AND

vendor=secomea AND product=sitemanager_1139_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_1139 AND version=-

AND

vendor=secomea AND product=sitemanager_1149_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_1149 AND version=-

AND

vendor=secomea AND product=sitemanager_3329_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3329 AND version=-

AND

vendor=secomea AND product=sitemanager_3339_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3339 AND version=-

AND

vendor=secomea AND product=sitemanager_3349_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3349 AND version=-

AND

vendor=secomea AND product=sitemanager_3529_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3529 AND version=-

AND

vendor=secomea AND product=sitemanager_3539_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3539 AND version=-

AND

vendor=secomea AND product=sitemanager_3549_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=sitemanager_3549 AND version=-

vendor=secomea AND product=linkmanager AND versionEndExcluding=9.7.622134021

AND

vendor=secomea AND product=gatemanager_4250_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=gatemanager_4250 AND version=-

AND

vendor=secomea AND product=gatemanager_4260_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=gatemanager_4260 AND version=-

AND

vendor=secomea AND product=gatemanager_8250_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=gatemanager_8250 AND version=-

AND

vendor=secomea AND product=gatemanager_9250_firmware AND versionEndExcluding=9.7.622134021

vendor=secomea AND product=gatemanager_9250 AND version=-

Reference

https://www.secomea.com/support/cybersecurity-advisory/

Keywords

CVE-2021-32010

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-32010

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures