CVE-2022-38125

FTP Agent forwards traffic on inactive ports to LinkManager

State: Published
Severity: 2.9 Low
Published: Apr 19, 2023
Updated: Feb 5, 2025
Reserved: Aug 10, 2022

Description

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

Scores

CVSS	Score	Vector	Source
3.1	2.9 Low	CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N	Secomea
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

Affected Products

Product	Versions
SiteManagerSecomea	5.0 through 10.0Affected

References

https://www.secomea.com/support/cybersecurity-advisory/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.