VULNERABILITY INTELLIGENCE

CVE-2020-29020

CVSS score9.1 CRITICAL
EPSS probability1.74%
CISA KEVNot currently listed
Published2021-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.

Weakness classification

  • VulnerabilityReporting@secomea.com: CWE-284
  • nvd@nist.gov: CWE-863

Primary references