CVE-2023-0317 GateManager debug interface is included in non-debug builds
An unprotected debug interface in GateManager allows administrators to access sensitive information due to inclusion in non-debug builds.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0317?
CVE-2023-0317 is a medium-severity vulnerability in Secomea GateManager, published on 19 Apr 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.
Weakness: CWE-420
Which versions are affected by CVE-2023-0317?
It affects 1 product.
Products include Secomea Gatemanager.
How do I fix CVE-2023-0317?
No fix has been published for CVE-2023-0317 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-0317 being exploited?
There is no known exploitation of CVE-2023-0317 in the wild and no public exploit code.
Other vulnerabilities in Secomea GateManager
- CVE-2021-32008 Logged-in Administrator may get unrestricted file system access
- CVE-2022-38123 Insufficient validation of plugin files
- CVE-2022-4308 Clear-text passwords in configuration files
- CVE-2022-2752 Potential vulnerabilities in GM login process
- CVE-2021-32009 Missing XSS guards on firmware page
Sources
Also known as GHSA-xf23-wgv8-93v6.