PT-2022-10061 · Secomea · Secomea Gatemanager+2

Published 2022-05-04 · Updated 2022-05-11 · CVE-2021-32010

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Secomea SiteManager versions prior to 9.7 Secomea LinkManager versions prior to 9.7 Secomea GateManager versions prior to 9.7

Description The issue is related to inadequate encryption strength in the TLS stack, which may facilitate man-in-the-middle attacks.

Recommendations For Secomea SiteManager versions prior to 9.7, update to version 9.7 or later. For Secomea LinkManager versions prior to 9.7, update to version 9.7 or later. For Secomea GateManager versions prior to 9.7, update to version 9.7 or later.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2021-32010

Affected Products

Secomea Gatemanager

Secomea Linkmanager

Secomea Sitemanager

References · 4

• https://secomea.com/support/cybersecurity-advisory · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32010 · Security Note
• https://t.me/cvenotify/30049 · Telegram Post