CVE-2022-25787

HIGH

Secomea Gatemanager 4250 Firmware - Information Disclosure

Title source: rule

Description

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.

References (1)

[Vendor Advisory] https://www.secomea.com/support/cybersecurity-advisory/

Scores

CVSS v3 7.5

EPSS 0.0006

EPSS Percentile 19.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-200 CWE-598

Status published

Products (4)

secomea/gatemanager_4250_firmware < 9.7.622134021

secomea/gatemanager_4260_firmware < 9.7.622134021

secomea/gatemanager_8250_firmware < 9.7.622134021

secomea/gatemanager_9250_firmware < 9.7.622134021

Published May 04, 2022

Tracked Since Feb 18, 2026