CVE-2021-32010 : Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.

Published 2022-05-04 14:15:08

Updated 2022-05-11 18:43:32

Source Secomea A/S

View at NVD, CVE.org

Products affected by CVE-2021-32010

Secomea » Gatemanager 8250 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Gatemanager 8250 » Version: N/A
Secomea » Gatemanager 4250 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Gatemanager 4250 » Version: N/A
Secomea » Gatemanager 4260 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Gatemanager 4260 » Version: N/A
Secomea » Gatemanager 9250 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Gatemanager 9250 » Version: N/A
Secomea » Sitemanager 1129 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_1129_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 1129 » Version: N/A
Secomea » Sitemanager 1139 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_1139_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 1139 » Version: N/A
Secomea » Sitemanager 1149 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_1149_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 1149 » Version: N/A
Secomea » Sitemanager 3329 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3329_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3329 » Version: N/A
Secomea » Sitemanager 3339 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3339_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3339 » Version: N/A
Secomea » Sitemanager 3349 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3349_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3349 » Version: N/A
Secomea » Sitemanager 3529 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3529_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3529 » Version: N/A
Secomea » Sitemanager 3539 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3539_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3539 » Version: N/A
Secomea » Sitemanager 3549 Firmware
Versions before (<) 9.7.622134021
cpe:2.3:o:secomea:sitemanager_3549_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Secomea » Sitemanager 3549 » Version: N/A
Secomea » Linkmanager
Versions before (<) 9.7.622134021
cpe:2.3:a:secomea:linkmanager:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-32010

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-32010

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
5.6	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L	2.2	3.4	Secomea A/S
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low

CWE ids for CVE-2021-32010

CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Assigned by:
- nvd@nist.gov (Primary)
- VulnerabilityReporting@secomea.com (Secondary)

References for CVE-2021-32010

https://www.secomea.com/support/cybersecurity-advisory/

Cybersecurity Advisory - Secomea
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-32010

Products affected by CVE-2021-32010

Exploit prediction scoring system (EPSS) score for CVE-2021-32010

CVSS scores for CVE-2021-32010

CWE ids for CVE-2021-32010

References for CVE-2021-32010