low3.5
CVE-2020-29023
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may …
Impact
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secomea | Gatemanager 4250 Firmware | All versions |
| Secomea | Gatemanager 4260 Firmware | All versions |
| Secomea | Gatemanager 9250 Firmware | All versions |
| Secomea | Gatemanager 8250 Firmware | before 9.3 |