Search/CVE-2022-38125
● CVE — Low

CVE-2022-38125

VendorsecomeaProductsitemanager 1129 firmware, sitemanager 1139 firmware, sitemanager 1149 firmware, sitemanager 3329 firmware, sitemanager 3339 firmware, sitemanager 3349 firmware, sitemanager 3529 firmware, sitemanager 3539 firmware, sitemanager 3549 firmware, sitemanager 1529 firmware, sitemanager 1539 firmware, sitemanager 1549 firmwareDiscoveredApr 19, 2023UpdatedFeb 5, 2025

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

CVSS v3.1
2.9 LOW
EPSS
0.16%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityLOW
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Connections
13 relationships
Timeline
disclosure → media coverage
Apr 19, 2023
Disclosure — published as a CVE record. · last revised by NVD Feb 5, 2025