CVE-2022-25782

5.4 mediumEPSS 0.5%

Medium (5.4) in secomea. EPSS 0.5% chance of exploitation in the next 30 days.

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs: CWE-269, CWE-274
Published: 2022-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

secomea:gatemanager_4250_firmware
secomea:gatemanager_4260_firmware
secomea:gatemanager_8250_firmware
secomea:gatemanager_9250_firmware

References

https://www.secomea.com/support/cybersecurity-advisory/
https://www.secomea.com/support/cybersecurity-advisory/

Check your stack JSON