CVE-2020-29020

Summary

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.

Affected Software

VendorProductVersion RangeStatus
SecomeaSiteManagerAll < 9.4.620527004affected

Weaknesses

  • CWE-284: CWE-284 Improper Access Control

Workarounds

Configure Uplink (WAN) to disable management via Uplink

ADP Enrichment

CVE Program Container

Additional References

References