CVE-2022-25786
CVE-2022-25786 is a medium-severity vulnerability in Secomea Gatemanager with a CVSS 3.x base score of 4.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-420.
Key facts
- Severity: Medium (CVSS 3.x base score 4.9)
- CVSS v2: 4.0
- EPSS exploit prediction: 1% (48th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-420
- Affected product: Secomea Gatemanager
- Published:
- Last modified:
Description
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.
Frequently asked questions
- What is CVE-2022-25786?
- Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.
- How severe is CVE-2022-25786?
- CVE-2022-25786 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2022-25786 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (48th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2022-25786?
- CVE-2022-25786 affects Secomea Gatemanager. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2022-25786?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2022-25786 published?
- CVE-2022-25786 was published on 2022-05-04 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*
More vulnerabilities in Secomea Gatemanager
- CVE-2021-32008 — Critical (CVSS 9.9): This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname…
- CVE-2022-38123 — High (CVSS 8.7): Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server…
- CVE-2022-4308 — Medium (CVSS 6.1): Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on…
- CVE-2022-2752 — Medium (CVSS 5.5): A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under…
- CVE-2021-32009 — Medium (CVSS 5.0): Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject…
- CVE-2021-32006 — Medium (CVSS 5.0): This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability…
All CVEs affecting Secomea Gatemanager →
Other CWE-420 vulnerabilities
- CVE-2023-20198 — Critical (CVSS 10.0): Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco…
- CVE-2025-52921 — Critical (CVSS 9.9): In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to…
- CVE-2025-13315 — Critical (CVSS 9.8): Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can…
- CVE-2025-54309 — Critical (CVSS 9.0): CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation…
- CVE-2025-54351 — High (CVSS 8.9): In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
- CVE-2026-40217 — High (CVSS 8.8): LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…