CVE-2020-29026

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9 CRITICAL
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
SecomeaCNA
9 CRITICAL
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
secomeagatemanager_8250_firmware
𝑥
< 9.2c
secomeagatemanager_4250_firmware
𝑥
< 9.0i
secomeagatemanager_4260_firmware
𝑥
< 9.0i
secomeagatemanager_9250_firmware
𝑥
< 9.0i
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.secomea.com/support/cybersecurity-advisory/#2918
https://www.secomea.com/support/cybersecurity-advisory/#2918