CVE-2022-25785 Buffer overrun

What is CVE-2022-25785?

CVE-2022-25785 is a medium-severity memory corruption vulnerability in Secomea SiteManager, published on 4 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.

Weakness: CWE-787, CWE-121

Which versions are affected by CVE-2022-25785?

It affects 9 products.

Products include Secomea Sitemanager 1129 Firmware, Secomea Sitemanager 1139 Firmware, Secomea Sitemanager 1149 Firmware, Secomea Sitemanager 3329 Firmware, Secomea Sitemanager 3339 Firmware, Secomea Sitemanager 3349 Firmware and 3 more.

How do I fix CVE-2022-25785?

No fix has been published for CVE-2022-25785 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2022-25785 being exploited?

There is no known exploitation of CVE-2022-25785 in the wild and no public exploit code.

Other vulnerabilities in Secomea SiteManager

• CVE-2022-25784 User controllable HTML element attribute (potential XSS) Critical 9.1
• CVE-2021-32005 SiteManager Log View XSS Issue Medium 6.5
• CVE-2022-38124 Unwanted debug tool Medium 5.7
• CVE-2020-29027 Reflected Cross Site Scripting Medium 5.4
• CVE-2022-38125 FTP Agent forwards traffic on inactive ports to LinkManager Low 2.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3hgg-j739-jpxx.