CVE:CVE-2022-25778
CNNVD:CNNVD-202205-2123
Secomea GateManager是丹麦Secomea公司的一款远程访问服务器产品。
Secomea GateManager 9.7 之前版本存在安全漏洞，该漏洞源于 Secomea GateManager 的 Web UI 中的跨站请求伪造 (CSRF) 漏洞允许网络钓鱼攻击者在登录的用户会话中发出请求。
solution:Upgrade secomea gatemanager_4250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_4260_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_8250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_9250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021)