2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-38125" ,
"sourceIdentifier" : "VulnerabilityReporting@secomea.com" ,
"published" : "2023-04-19T12:15:07.610" ,
2023-04-28 04:00:28 +02:00
"lastModified" : "2023-04-28T00:56:09.640" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client."
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-04-28 04:00:28 +02:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.5 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 3.6
} ,
2023-04-24 12:24:31 +02:00
{
"source" : "VulnerabilityReporting@secomea.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" ,
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 2.9 ,
"baseSeverity" : "LOW"
} ,
"exploitabilityScore" : 1.2 ,
"impactScore" : 1.4
}
]
} ,
"weaknesses" : [
2023-04-28 04:00:28 +02:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
} ,
2023-04-24 12:24:31 +02:00
{
"source" : "VulnerabilityReporting@secomea.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-923"
}
]
}
] ,
2023-04-28 04:00:28 +02:00
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3549_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "17034D9B-EEC0-47C4-B262-C8699DCF31CE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3549:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A05A3825-9C8E-43EF-A2DC-F0B06694CCCD"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3539_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "5483EDAF-69C3-4E09-9F12-B9E2775CB4D5"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3539:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D26BFEA-056C-4760-8D10-A0DF3677DAD1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3529_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "36890A42-2A12-4637-8593-1D0DE0402B41"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3529:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5C5F7D37-729C-4969-9661-C933C9F16980"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3349_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "66D8982B-1087-4C69-8773-998509A9C58C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3349:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8C7D7926-A5F5-46A1-A6B7-3C99130FA609"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3339_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "4E54B3F5-30F2-4360-BBD9-4A21AEB78151"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3339:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF64F7DA-FD12-4231-B792-EF8F79B587CF"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_3329_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "DD2DF889-5E8C-4183-AFC8-098355C3704E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_3329:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6ABE08F2-C6D0-4CA3-99F4-0654653E7BF3"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1549_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "DE4EFF13-B933-40F8-957D-5AA71AF0CC95"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1549:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "402344EC-DDE3-452B-BDD7-63E1DE7EB030"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1539_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "854722A1-8028-4819-BF3E-645875E372B2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1539:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5848F390-7F56-44ED-9267-38CA1971DE01"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1529_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "5126CFB4-1AA2-4663-9AB1-EBC101DC9F1C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1529:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "04157541-64E2-4D44-8101-8BC9972283D0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1149_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "9586E608-B8C6-4531-AA5C-4CEE23290607"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1149:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "060DA5EF-B6FE-4E02-B0A5-EAAF5CF5AC35"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1139_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "5E7AA2FA-06B5-433A-BE7C-7E3B28838333"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1139:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "856E0FE1-D1FD-47A3-8DE0-A12F6FBD60E8"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:secomea:sitemanager_1129_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.622465022" ,
"matchCriteriaId" : "540F8642-361E-461D-A082-CAB4500BA25B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:secomea:sitemanager_1129:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29BFC1D6-82B6-4E20-BBFB-63F33373D78B"
}
]
}
]
}
] ,
2023-04-24 12:24:31 +02:00
"references" : [
{
"url" : "https://www.secomea.com/support/cybersecurity-advisory/" ,
2023-04-28 04:00:28 +02:00
"source" : "VulnerabilityReporting@secomea.com" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}