CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-25787
Medium (6.7) in secomea. EPSS 0.2% chance of exploitation in the next 30 days.
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-598
- Published
- Modified
- Record from
- the NVD, synced
Affected
- secomea:gatemanager_4250_firmware
- secomea:gatemanager_4260_firmware
- secomea:gatemanager_8250_firmware
- secomea:gatemanager_9250_firmware