medium4.2
CVE-2022-25778
Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.
Impact
Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secomea | Gatemanager 4250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 4260 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 8250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 9250 Firmware | before 9.7.622134021 |