Platform
other
Component
sitemanager
Fixed in
9.7
CVE-2022-25784 describes a cross-site scripting (XSS) vulnerability affecting the Web GUI of Secomea SiteManager. This vulnerability allows a logged-in user to inject malicious scripts, potentially compromising the system and user accounts. The vulnerability impacts versions of SiteManager prior to 9.7, and a patch is available in version 9.7.
Successful exploitation of this XSS vulnerability allows an attacker to execute arbitrary JavaScript code within the context of a logged-in user's session. This can lead to a variety of malicious actions, including session hijacking, credential theft, and defacement of the SiteManager web interface. An attacker could potentially gain full control over the affected SiteManager instance, leading to significant operational disruption and data compromise. The impact is amplified if the SiteManager is used to manage critical industrial control systems, as an attacker could potentially manipulate those systems.
CVE-2022-25784 was publicly disclosed on May 4, 2022. While no public exploits have been widely reported, the CRITICAL severity and ease of exploitation make it a likely target for opportunistic attackers. The vulnerability is not currently listed on CISA KEV. Public proof-of-concept code is not readily available, but the XSS nature of the vulnerability makes it relatively straightforward to develop.
Exploit Status
EPSS
0.71% (72% percentile)
CVSS Vector
The primary mitigation for CVE-2022-25784 is to upgrade Secomea SiteManager to version 9.7 or later, which contains the fix. If upgrading immediately is not possible, consider implementing strict input validation and output encoding on all user-supplied data within the Web GUI. While not a complete solution, this can help reduce the attack surface. Web application firewalls (WAFs) configured to detect and block XSS payloads can also provide an additional layer of defense. Review SiteManager's configuration to ensure least privilege access controls are enforced.
Actualice SiteManager a la versión 9.7 o posterior. Esta actualización corrige la vulnerabilidad XSS que permite la inyección de scripts por usuarios autenticados.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2022-25784 is a critical cross-site scripting (XSS) vulnerability in Secomea SiteManager's Web GUI, allowing attackers to inject scripts via a logged-in user's session.
You are affected if you are running Secomea SiteManager versions prior to 9.7. Upgrade immediately to mitigate the risk.
Upgrade Secomea SiteManager to version 9.7 or later. Consider input validation and WAF rules as interim measures.
While no widespread exploitation has been confirmed, the vulnerability's severity and ease of exploitation make it a potential target for attackers.
Refer to the Secomea security advisory for CVE-2022-25784 on the Secomea website for detailed information and updates.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.