CVE-2022-25785

MEDIUM

Secomea SiteManager < 9.7.622134021 - Authenticated Stack-based Buffer Overflow

Title source: llm

Description

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.secomea.com/support/cybersecurity-advisory/

Scores

CVSS v3 6.6

EPSS 0.0090

EPSS Percentile 55.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-121 CWE-787

Status published

Products (9)

secomea/sitemanager_1129_firmware < 9.7.622134021

secomea/sitemanager_1139_firmware < 9.7.622134021

secomea/sitemanager_1149_firmware < 9.7.622134021

secomea/sitemanager_3329_firmware < 9.7.622134021

secomea/sitemanager_3339_firmware < 9.7.622134021

secomea/sitemanager_3349_firmware < 9.7.622134021

secomea/sitemanager_3529_firmware < 9.7.622134021

secomea/sitemanager_3539_firmware < 9.7.622134021

secomea/sitemanager_3549_firmware < 9.7.622134021

Published May 04, 2022

Tracked Since Feb 18, 2026