« Back to list

CVE-2024-1969

Status: DeferredHigh (8.2)—

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Secomea — GatemanagerAI

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2024-1969",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1969",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-29T15:12:46.757035Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "VulnerabilityReporting@secomea.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "VulnerabilityReporting@secomea.com",
      "affectedData": [
        {
          "vendor": "Secomea",
          "modules": [
            "webserver"
          ],
          "product": "GateManager",
          "versions": [
            {
              "status": "affected",
              "version": "9.7",
              "lessThan": "11.2.624095033",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:secomea:gatemanager:-:*:*:*:*:*:*:*"
          ],
          "vendor": "secomea",
          "product": "gatemanager",
          "versions": [
            {
              "status": "affected",
              "version": "9.7"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-29T14:15:08.430",
  "references": [
    {
      "url": "https://www.secomea.com/support/cybersecurity-advisory/",
      "source": "VulnerabilityReporting@secomea.com"
    },
    {
      "url": "https://www.secomea.com/support/cybersecurity-advisory/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "VulnerabilityReporting@secomea.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033.\n\n"
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de copia de búfer sin verificar el tamaño de la entrada ('desbordamiento de búfer clásico') en Secomea GateManager (módulos de servidor web) permite el bloqueo de GateManager. Este problema afecta a GateManager: desde 9.7 antes de 11.2.624095033."
    }
  ],
  "lastModified": "2026-06-17T07:05:31.290",
  "sourceIdentifier": "VulnerabilityReporting@secomea.com"
}