First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-3675

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web GUI) allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Secomea	GateManager	>= 11.0.623074018, < 11.0.623373051

References

Timeline

Published: Apr 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-367507.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367517.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367527.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367537.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367547.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367557.2A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGE CVE-2023-367568.0Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-367578.0Microsoft Exchange Server Spoofing Vulnerability CVE-2023-367589.8Visual Studio Elevation of Privilege Vulnerability CVE-2023-367596.7Visual Studio Elevation of Privilege Vulnerability CVE-2023-36768.8A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileg CVE-2023-367607.83D Viewer Remote Code Execution Vulnerability

CVE-2023-3675: Medium severity, CVSS 6.5 | Vulnix