PT-2024-18459 · Secomea · Secomea Gatemanager

Published 2024-04-29 · Updated 2024-04-30 · CVE-2024-1969

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions 9.7 through 11.2.624095033

Description A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') issue in the webserver modules of Secomea GateManager allows the crash of GateManager.

Recommendations For versions 9.7 through 11.2.624095033, update to a version after 11.2.624095033 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-1969

Affected Products

Secomea Gatemanager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-1969 · Security Note
• https://twitter.com/cracbot/status/1785246884837077011 · Twitter Post
• https://t.me/cvenotify/78524 · Telegram Post
• https://twitter.com/CVEnew/status/1784940092617830609 · Twitter Post
• https://t.me/cvenotify/78413 · Telegram Post
• https://twitter.com/linuxpatch/status/1784962653401628966 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1784984337529627026 · Twitter Post
• https://secomea.com/support/cybersecurity-advisory · Note